Two things strike me as odd about this.. one is that [the AVCs](http://sprunge.us/SgXE) appear to be relating to a Passenger daemon running in the httpd_t context rather than passenger_t.

The other is that my RHEL 6 host appears to permit this already:

<pre>
# sesearch --allow -s httpd_t -c capability -p fowner
Found 1 semantic av rules:
   allow httpd_t httpd_t : capability { fowner fsetid sys_resource } ; 
# rpm -q selinux-policy-targeted
selinux-policy-targeted-3.7.19-195.el6.noarch
</pre>