--- mariadb-server.te	2017-12-21 16:48:56.000000000 +0100
+++ /root/mariadb-server.te	2018-02-01 16:16:32.430792922 +0100
@@ -7,6 +7,7 @@
 	type user_tmp_t;
 	#type kerberos_master_port_t;
 	type mysqld_safe_t;
+	type mysqld_safe_exec_t;
 	type tmp_t;
 	type tmpfs_t;
 	type hostname_exec_t;
@@ -82,6 +83,8 @@
 # keep for the moment.
 allow mysqld_t shell_exec_t:file { execute_no_trans getattr read execute open };
 allow mysqld_t bin_t:file { getattr read execute open execute_no_trans ioctl };
+# More specific rule for mysqld_safe_exec_t programs (such as the SST scripts)
+allow mysqld_t mysqld_safe_exec_t:file { getattr read execute open execute_no_trans ioctl };
 
 # MariaDB additions
 allow mysqld_t self:process setpgid;