default or selected kernelversion does not have config value CONFIG_SECURITY_SELINUX_ENABLE_SECMARK_DEFAULT.
Result is shown for kernelversion 5.3.7

NSA SELinux enable new secmark network controls by default

configname: CONFIG_SECURITY_SELINUX_ENABLE_SECMARK_DEFAULT

Linux Kernel Configuration
└─>Security options
└─>NSA SELinux enable new secmark network controls by default
In linux kernel since version 2.6.18 (release Date: 2006-09-19)  
This option determines whether the new secmark-based network
controls will be enabled by default. If not, the old internal
per-packet controls will be enabled by default, preserving
old behavior.

If you enable the new controls, you will need updated
SELinux userspace libraries, tools and policy. Typically,
your distribution will provide these and enable the new controls
in the kernel they also distribute.

Note that this option can be overridden at boot with the
selinux_compat_net parameter, and after boot via
/selinux/compat_net. See