diff --git a/private/su.te b/private/su.te
index d42bf614c332393113e0c4998a3a7cebe0c28a86..6e7fc37d97e68201bc7a5829fa40efa0cfb47af0 100644
--- a/private/su.te
+++ b/private/su.te
@@ -13,7 +13,7 @@ userdebug_or_eng(`
   # Put the incident command into its domain so it is the same on user, userdebug and eng.
   domain_auto_trans(su, incident_exec, incident)
 
-# su is also permissive to permit setenforce.
+  # su is also permissive to permit setenforce.
   permissive su;
 
   app_domain(su)