Add /var/lib/fapolicyd to tmpfiles

On image based system, /var/lib/fapolicyd is not created during rpm
installation but needs to be created during boot using tmpfiles.d

Fixes:
    fapolicyd[1463]: Failed writing db version No such file or directory

Resolves: RHEL-109682

Add-var-lib-fapolicyd-to-tmpfiles.patch

@@ -0,0 +1,28 @@
+From de7b5e953e56ecad497878d1113abd8c10d8a453 Mon Sep 17 00:00:00 2001
+From: Petr Lautrbach <lautrbach@redhat.com>
+Date: Fri, 15 Aug 2025 12:38:04 +0200
+Subject: [PATCH] Add /var/lib/fapolicyd to tmpfiles
+Content-type: text/plain
+
+On image based system, /var/lib/fapolicyd is not created during rpm
+installation but needs to be created during boot using tmpfiles.d
+
+Fixes:
+    fapolicyd[1463]: Failed writing db version No such file or directory
+
+Signed-off-by: Petr Lautrbach <lautrbach@redhat.com>
+---
+ init/fapolicyd-tmpfiles.conf | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/init/fapolicyd-tmpfiles.conf b/init/fapolicyd-tmpfiles.conf
+index 24459d340d3c..84fbaa1cf6ed 100644
+--- a/init/fapolicyd-tmpfiles.conf
++++ b/init/fapolicyd-tmpfiles.conf
+@@ -1,1 +1,3 @@
+ d /run/fapolicyd 0770 root fapolicyd -
++d /var/lib/fapolicyd 770 root fapolicyd -
++Z /etc/fapolicyd - root fapolicyd -
+-- 
+2.50.1
+

fapolicyd.spec

@@ -42,6 +42,7 @@ Patch9: fapolicyd-data-format.patch
 Patch10: var-run-t-dir-selinux.patch
 Patch11: fapolicyd-skip-nonregular.patch
 Patch12: fapolicyd-socket-segfault.patch
+Patch13: Add-var-lib-fapolicyd-to-tmpfiles.patch
 
 %description
 Fapolicyd (File Access Policy Daemon) implements application whitelisting
@@ -85,6 +86,7 @@ The %{name}-selinux package contains selinux policy for the %{name} daemon.
 %patch -P 10 -p1 -b .var-run-dir
 %patch -P 11 -p1 -b .skip-nonregular
 %patch -P 12 -p1 -b .socket-segfault
+%patch -P 13 -p1 -b .var-lib-dir
 
 # generate rules for python
 sed -i "s|%python2_path%|`readlink -f %{__python2}`|g" rules.d/*.rules