---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11556): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11556): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=559e999a1c5d a2=0 a3=0 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11556): avc: denied { search } for pid=67612 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11557): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11557): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=559e999a1c5d a2=0 a3=0 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11557): avc: denied { search } for pid=67612 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11558): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11558): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f160a7ba5e9 a2=7f1609b53640 a3=0 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11558): avc: denied { search } for pid=67612 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11559): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11559): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f160a7ba5e9 a2=80000 a3=0 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11559): avc: denied { search } for pid=67612 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11560): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11560): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=559e999abb81 a2=0 a3=0 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11560): avc: denied { search } for pid=67612 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11561): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11561): arch=c000003e syscall=0 success=no exit=-13 a0=43 a1=7f1609b51945 a2=1 a3=7f160a496204 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11561): avc: denied { read } for pid=67612 comm="Wt-8" path="pipe:[232170]" dev="pipefs" ino=232170 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11562): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11562): arch=c000003e syscall=1 success=no exit=-13 a0=85 a1=7f1609b51000 a2=1 a3=0 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11562): avc: denied { write } for pid=67612 comm="Wt-8" path="pipe:[232171]" dev="pipefs" ino=232171 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11563): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11563): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f16072302c0 a2=0 a3=0 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11563): avc: denied { search } for pid=67612 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11564): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11564): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f1607230040 a2=0 a3=0 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11564): avc: denied { search } for pid=67612 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11565): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11565): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f1607218e70 a2=0 a3=0 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11565): avc: denied { search } for pid=67612 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11566): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11566): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f1607218660 a2=0 a3=0 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11566): avc: denied { search } for pid=67612 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11567): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11567): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f1607218ae0 a2=0 a3=0 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11567): avc: denied { search } for pid=67612 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11568): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11568): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f1607218ea0 a2=0 a3=0 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11568): avc: denied { search } for pid=67612 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11569): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11569): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=559e99bdb850 a2=345 a3=7f160a7b1c20 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11569): avc: denied { use } for pid=67612 comm="Wt-8" path="socket:[219988]" dev="sockfs" ino=219988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11570): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11570): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f1609b52750 a2=241 a3=1b6 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11570): avc: denied { search } for pid=67612 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11571): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11571): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=559e999a1c5d a2=0 a3=0 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11571): avc: denied { search } for pid=67612 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11572): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11572): arch=c000003e syscall=62 success=no exit=-13 a0=10784 a1=a a2=7f1609045de0 a3=0 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11572): avc: denied { signal } for pid=67612 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11573): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11573): arch=c000003e syscall=234 success=no exit=-13 a0=1081c a1=10821 a2=6 a3=8 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11573): avc: denied { signal } for pid=67612 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 20 22:03:15 2026 type=PROCTITLE msg=audit(1774058595.747:11574): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774058595.747:11574): arch=c000003e syscall=234 success=no exit=-13 a0=1081c a1=10821 a2=6 a3=8 items=0 ppid=67460 pid=67612 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774058595.747:11574): avc: denied { signal } for pid=67612 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"