From 713be3a9eff3c1f7e4199622e3193b40ce28ab6d Mon Sep 17 00:00:00 2001
From: 12ww1160 <12ww1160@confdroid.com>
Date: Wed, 22 Apr 2026 15:55:34 +0200
Subject: [PATCH 1/2] OP#590 fix selinux

---
 manifests/main/dirs.pp | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/manifests/main/dirs.pp b/manifests/main/dirs.pp
index 638c87c..3fbbdd2 100644
--- a/manifests/main/dirs.pp
+++ b/manifests/main/dirs.pp
@@ -29,8 +29,8 @@ class confdroid_jenkins::main::dirs (
       mode     => '0755',
       selrange => s0,
       selrole  => object_r,
-      seltype  => var_log_t,
-      seluser  => unconfined_u,
+      seltype  => var_lib_t,
+      seluser  => system_u,
     }
 
     # jenkins cache
@@ -54,7 +54,7 @@ class confdroid_jenkins::main::dirs (
       selrange => s0,
       selrole  => object_r,
       seltype  => var_run_t,
-      seluser  => unconfined_u,
+      seluser  => system_u,
     }
   }
 }

From 0dd226590a43e46f2addb9a8333ca27d6c428f0e Mon Sep 17 00:00:00 2001
From: Jenkins Server <jenkins@confdroid.com>
Date: Wed, 22 Apr 2026 15:56:48 +0200
Subject: [PATCH 2/2] Recommit for updates in build 18

---
 .../confdroid_jenkins_3A_3Amain_3A_3Adirs.html              | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/doc/puppet_classes/confdroid_jenkins_3A_3Amain_3A_3Adirs.html b/doc/puppet_classes/confdroid_jenkins_3A_3Amain_3A_3Adirs.html
index 975b6af..2cd8f0f 100644
--- a/doc/puppet_classes/confdroid_jenkins_3A_3Amain_3A_3Adirs.html
+++ b/doc/puppet_classes/confdroid_jenkins_3A_3Amain_3A_3Adirs.html
@@ -186,8 +186,8 @@ class confdroid_jenkins::main::dirs (
       mode     =&gt; &#39;0755&#39;,
       selrange =&gt; s0,
       selrole  =&gt; object_r,
-      seltype  =&gt; var_log_t,
-      seluser  =&gt; unconfined_u,
+      seltype  =&gt; var_lib_t,
+      seluser  =&gt; system_u,
     }
 
     # jenkins cache
@@ -211,7 +211,7 @@ class confdroid_jenkins::main::dirs (
       selrange =&gt; s0,
       selrole  =&gt; object_r,
       seltype  =&gt; var_run_t,
-      seluser  =&gt; unconfined_u,
+      seluser  =&gt; system_u,
     }
   }
 }</pre>