Missing mysqld SELinux policy in SLES 16

SUSE Linux Enterprise Server
1

I noticed that mariadb service was no longer running. I noticed the following in the logs

2026-05-02T06:36:59.043481+00:00 whitedwarf (d-helper)[15122]: mariadb.service: Failed to set up special execution directory in /var/lib: Permission denied
2026-05-02T06:36:59.043718+00:00 whitedwarf (d-helper)[15122]: mariadb.service: Failed at step STATE_DIRECTORY spawning /usr/libexec/mysql/mysql-systemd-helper: Pe
rmission denied

I’m not sure what caused it, probably an update, but the only way to make it work again was to create a custom policy that included

policy_module(mymodule, 0.0.1)

require {
type init_t;
type mysqld_db_t;
};

allow init_t mysqld_db_t:file setattr;

2

I’m encountering exactly same issue but I’m using openSUSE Leap 16.0.

MariaDB was working fine but then I updated packages with zypper update and now after reboot MariaDB doesn’t start anymore…
/var/log/audit/audit.log shows

type=AVC msg=audit(1778088497.019:269): avc:  denied  { setattr } for  pid=3671 comm="(d-helper)" name="aria_log_control" dev="dm-1" ino=26261 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:mysqld_db_t:s0 tclass=file permissive=0

audit2allow </var/log/audit/audit.log

#============= init_t ==============
allow init_t mysqld_db_t:file setattr;