diff --git a/sepolicy/tee.te b/sepolicy/tee.te
index a5dd0b0..b9949f9 100755
--- a/sepolicy/tee.te
+++ b/sepolicy/tee.te
@@ -1,3 +1,6 @@
+# STOPSHIP - all domains must be in enforcing mode
+permissive tee;
+
 allow tee self:capability { setuid setgid };
 
 allow tee block_device:dir { getattr search };