diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc
index 1d88557..8787797 100644
--- a/recipes-security/refpolicy/refpolicy_common.inc
+++ b/recipes-security/refpolicy/refpolicy_common.inc
@@ -108,7 +108,7 @@ DEFAULT_ENFORCING ??= "enforcing"
 POLICY_NAME ?= "${POLICY_TYPE}"
 POLICY_DISTRO ?= "debian"
 POLICY_UBAC ?= "n"
-POLICY_UNK_PERMS ?= "allow"
+POLICY_UNK_PERMS ?= "deny"
 POLICY_DIRECT_INITRC ?= "y"
 POLICY_SYSTEMD ?= "${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'y', 'n', d)}"
 POLICY_MONOLITHIC ?= "n"