All known SELinux modes
This is _the main_ or _base_ configuration for known SELinux modes. However, note that,
for example, a permissive mode could be set by just setting the Linux Security Module;
i.e., "lsm=selinux" means "enable SELinux using the permissive mode". Or even setting the
enforcing param to a value equal or less than 0; i.e., "lsm=selinux enforcing=0".
Additionally, removing the "lsm" from the kernel params does not mean to use none
LSM module. Instead, it just fallback to the kernel configuration at the compile
time, which in SUSE is to use AppArmor according to the CONFIG_LSM variable. So, it
could be said that dropping all mode param to disabling SELinux is safe enough.
To know more, please visit the LSM Usage documentation at
https://www.kernel.org/doc/html/latest/admin-guide/LSM/index.html
and/or grep for CONFIG_LSM in /boot/config-*
