Disable debugfs access by default.

Change-Id: I8265e34a76913a76eedd2d7a6fe3b14945fde924
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

domain.te

@@ -102,7 +102,7 @@ r_dir_file(domain, inotify)
 r_dir_file(domain, cgroup)
 
 # debugfs access
-bool debugfs true;
+bool debugfs false;
 if (debugfs) {
 allow domain debugfs:dir r_dir_perms;
 allow domain debugfs:file rw_file_perms;