Revert "Don't enforce sepolicy"
This reverts commit c2f06dbefd1dc133116340dbf354cdfd53e087e7.
Bug: 129911807
Test: run locally
diff --git a/host/commands/launch/flags.cc b/host/commands/launch/flags.cc
index 1eda06e..be4b33f 100644
--- a/host/commands/launch/flags.cc
+++ b/host/commands/launch/flags.cc
@@ -65,7 +65,7 @@
"The codename of the device's hardware, one of {cutf_ivsh, cutf_cvm}");
DEFINE_string(guest_security, "selinux",
"The security module to use in the guest");
-DEFINE_bool(guest_enforce_security, false,
+DEFINE_bool(guest_enforce_security, true,
"Whether to run in enforcing mode (non permissive). Ignored if "
"-guest_security is empty.");
DEFINE_bool(guest_audit_security, true,