add template xml

refpolicy/policy/modules/admin/su.if

@@ -1,5 +1,26 @@
 ## <summary>Run shells with substitute user and group</summary>
 
+#######################################
+## <summary>
+##	The per user domain template for the su module.
+## </summary>
+## <desc>
+##	<p>
+##	This template creates a derived domain which is allowed
+##	to change the linux user id, to run shells as a different
+##	user.
+##	</p>
+##	<p>
+##	This template is invoked automatically for each user, and
+##	generally does not need to be invoked directly
+##	by policy writers.
+##	</p>
+## </desc>
+## <param name="userdomain_prefix">
+##	The prefix of the user domain (e.g., user
+##	is the prefix for user_t).
+## </param>
+#
 template(`su_per_userdomain_template',`
 
 	type $1_su_t;