diff --git a/domain.te b/domain.te
index ab6876062958c5c642fd158ad3bc3fff66eb80d0..9336644afeb47f7d8d7b1b42ea51395c4ce96ee8 100644
--- a/domain.te
+++ b/domain.te
@@ -102,7 +102,7 @@ r_dir_file(domain, inotify)
 r_dir_file(domain, cgroup)
 
 # debugfs access
-bool debugfs true;
+bool debugfs false;
 if (debugfs) {
 allow domain debugfs:dir r_dir_perms;
 allow domain debugfs:file rw_file_perms;