diff --git a/docker/mariadb/mariadb_sudoers b/docker/mariadb/mariadb_sudoers
index 7a44665..17eff9f 100644
--- a/docker/mariadb/mariadb_sudoers
+++ b/docker/mariadb/mariadb_sudoers
@@ -1 +1 @@
-%microservices ALL=(root) NOPASSWD: /bin/chown mysql\: /var/lib/mysql, /usr/bin/chown mysql\: /var/lib/mysql, /opt/ccp/bin/mariadb-security-reset.expect
+%microservices ALL=(root) NOPASSWD: /bin/chown mysql\: /var/lib/mysql, /bin/chown mysql\:mysql /var/log/ccp/mysql, /opt/ccp/bin/mariadb-security-reset.expect
diff --git a/service/files/my.cnf.j2 b/service/files/my.cnf.j2
index bd2e4b1..90cb31a 100644
--- a/service/files/my.cnf.j2
+++ b/service/files/my.cnf.j2
@@ -3,7 +3,7 @@ bind-address = {{ network_topology["private"]["address"] }}
 port = {{ mariadb_port }}
 
 datadir=/var/lib/mysql/
-log-error=/var/log/mysql.log
+log-error=/var/log/ccp/mysql/mysql.log
 max_connections=10000
 
 log-bin=mariadb-bin
diff --git a/service/mariadb.yaml b/service/mariadb.yaml
index 3f09f5d..86d4c34 100644
--- a/service/mariadb.yaml
+++ b/service/mariadb.yaml
@@ -8,7 +8,14 @@ service:
       probes:
         readiness: /opt/ccp/bin/mariadb-readiness.sh
         liveness: "true"
+      volumes:
+      - name: mysql-logs
+        path: /var/log/ccp/mysql
+        type: host
+        readOnly: False
       pre:
+        - name: chown-logs-dir
+          command: sudo /bin/chown mysql:mysql /var/log/ccp/mysql
         - name: mariadb-bootstrap
           command: /opt/ccp/bin/mariadb-bootstrap.sh
       daemon:
@@ -18,7 +25,6 @@ service:
             - mariadb-readiness
             - mariadb-bootstrap
             - mariadb-security-reset.expect
-
 files:
   mariadb-my-cnf:
     path: /etc/mysql/my.cnf