diff --git a/Android.mk b/Android.mk
index 1535b561193b64fff8a644af8c57a3645a0c6166..eae860b223020a29f92fd39776bc14fd5436611f 100644
--- a/Android.mk
+++ b/Android.mk
@@ -11,7 +11,7 @@ include $(CLEAR_VARS)
 # is frozen, we should flip this to true. This forces any currently
 # permissive domains into unconfined+enforcing.
 #
-FORCE_PERMISSIVE_TO_UNCONFINED:=true
+FORCE_PERMISSIVE_TO_UNCONFINED:=false
 
 ifeq ($(TARGET_BUILD_VARIANT),user)
   # User builds are always forced unconfined+enforcing