Polishing policy.

diff --git a/rocci_server.te b/rocci_server.te
index 61f9ec6..3236818 100644 (file)
--- a/rocci_server.te
+++ b/rocci_server.te
@@ -14,6 +14,7 @@ require {
        type sysfs_t;
        type var_log_t;
        type man_t;
+
        class capability2 block_suspend;
        class dir { open read search };
        class file { execute execute_no_trans getattr open read write };
@@ -40,7 +41,8 @@ allow passenger_t self:process { getsession signull };
 allow passenger_t self:tcp_socket listen;
 allow passenger_t var_log_t:lnk_file read;
 
-# passenger_native_support.so
+# compiling and using passenger_native_support.so
+# (not needed for rOCCI-server package in Fedora/EPEL)
 allow passenger_t passenger_var_run_t:file execute;
 
 # not audited rules :-(