Make the isolated_app domain enforcing.

Change-Id: I11be7d1713dd7cb35b8046503a09e42567e53d86
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
diff --git a/isolated_app.te b/isolated_app.te
index 3b99e37..07b9b44 100644
--- a/isolated_app.te
+++ b/isolated_app.te
@@ -10,7 +10,6 @@
 ###
 
 type isolated_app, domain;
-permissive isolated_app;
 app_domain(isolated_app)
 
 # Already connected, unnamed sockets being passed over some other IPC