i did a run with setenforce 0 and semodule -DB in permissive mode: https://openqa.opensuse.org/tests/4608316# https://openqa.opensuse.org/tests/4608315# so it is probably a policy issue