---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.613:7185): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.613:7185): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7efe223f33c0 a2=7efe2227e0c0 a3=0 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="sqlservr" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.613:7185): avc: denied { search } for pid=33398 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7186): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7186): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5600ea7c6c5d a2=0 a3=0 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7186): avc: denied { search } for pid=33398 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7187): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7187): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5600ea7c6c5d a2=0 a3=0 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7187): avc: denied { search } for pid=33398 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7188): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7188): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7efe23bba5e9 a2=7efe23847640 a3=0 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7188): avc: denied { search } for pid=33398 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7189): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7189): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7efe23bba5e9 a2=80000 a3=0 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7189): avc: denied { search } for pid=33398 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7190): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7190): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5600ea7d0b81 a2=0 a3=0 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7190): avc: denied { search } for pid=33398 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7191): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7191): arch=c000003e syscall=0 success=no exit=-13 a0=43 a1=7efe23845945 a2=1 a3=7efe23c30204 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7191): avc: denied { read } for pid=33398 comm="Wt-8" path="pipe:[129682]" dev="pipefs" ino=129682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7192): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7192): arch=c000003e syscall=1 success=no exit=-13 a0=85 a1=7efe23845000 a2=1 a3=0 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7192): avc: denied { write } for pid=33398 comm="Wt-8" path="pipe:[129683]" dev="pipefs" ino=129683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7193): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7193): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7efe206302c0 a2=0 a3=0 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7193): avc: denied { search } for pid=33398 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7194): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7194): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7efe20630040 a2=0 a3=0 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7194): avc: denied { search } for pid=33398 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7195): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7195): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7efe20618cf0 a2=0 a3=0 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7195): avc: denied { search } for pid=33398 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7196): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7196): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7efe20618b70 a2=0 a3=0 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7196): avc: denied { search } for pid=33398 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7197): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7197): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7efe20618780 a2=0 a3=0 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7197): avc: denied { search } for pid=33398 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7198): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7198): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7efe20618ea0 a2=0 a3=0 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7198): avc: denied { search } for pid=33398 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7199): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7199): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=5600eaa00850 a2=345 a3=7efe23bb1c20 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7199): avc: denied { use } for pid=33398 comm="Wt-8" path="socket:[86860]" dev="sockfs" ino=86860 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7200): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7200): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7efe23846750 a2=241 a3=1b6 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7200): avc: denied { search } for pid=33398 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7201): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7201): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5600ea7c6c5d a2=0 a3=0 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7201): avc: denied { search } for pid=33398 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7202): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7202): arch=c000003e syscall=62 success=no exit=-13 a0=8236 a1=a a2=7efe22445de0 a3=0 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7202): avc: denied { signal } for pid=33398 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7203): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7203): arch=c000003e syscall=234 success=no exit=-13 a0=8276 a1=827b a2=6 a3=8 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7203): avc: denied { signal } for pid=33398 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:07:38 2026 type=PROCTITLE msg=audit(1774663658.925:7204): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663658.925:7204): arch=c000003e syscall=234 success=no exit=-13 a0=8276 a1=827b a2=6 a3=8 items=0 ppid=33334 pid=33398 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663658.925:7204): avc: denied { signal } for pid=33398 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"