The bug that was mentionned in: MDEV-13950 is back.

The mysqld_safe script uses the mktemp command without the -t option once again, and recovery fails as it gets blocked by SeLinux.

# grep -n mktemp /usr/bin/mysqld_safe

229:  local wr_logfile=$(mktemp /tmp/wsrep_recovery.XXXXXX)

I know I can patch the file, but we manage several of these systems with puppet and it becomes problematic to do so in bulk. I may temporarily create a puppet managed selinux policy that would allow the action, as a stopgap measure.

Here is a list of installed packages as well as their version numbers:

# rpm -qa | grep -i mariadb

MariaDB-compat-10.3.22-1.el7.centos.x86_64

MariaDB-common-10.3.22-1.el7.centos.x86_64

MariaDB-devel-10.3.22-1.el7.centos.x86_64

MariaDB-backup-10.3.22-1.el7.centos.x86_64

MariaDB-client-10.3.22-1.el7.centos.x86_64

MariaDB-server-10.3.22-1.el7.centos.x86_64

Thanks!