---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13677): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13677): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=562b8f861cb0 a2=0 a3=0 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13677): avc: denied { search } for pid=75900 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13678): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13678): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=562b8f861cb0 a2=0 a3=0 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13678): avc: denied { search } for pid=75900 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13679): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13679): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7ff7719ba5e9 a2=7ff770f1f640 a3=0 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13679): avc: denied { search } for pid=75900 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13680): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13680): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff7719ba5e9 a2=80000 a3=0 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13680): avc: denied { search } for pid=75900 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13681): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13681): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=562b8f86bbe8 a2=0 a3=0 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13681): avc: denied { search } for pid=75900 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13682): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13682): arch=c000003e syscall=0 success=no exit=-13 a0=43 a1=7ff770f1d945 a2=1 a3=7ff771a68204 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13682): avc: denied { read } for pid=75900 comm="Wt-8" path="pipe:[257463]" dev="pipefs" ino=257463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13683): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13683): arch=c000003e syscall=1 success=no exit=-13 a0=81 a1=7ff770f1d000 a2=1 a3=0 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13683): avc: denied { write } for pid=75900 comm="Wt-8" path="pipe:[257464]" dev="pipefs" ino=257464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13684): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13684): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff76e630300 a2=0 a3=0 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13684): avc: denied { search } for pid=75900 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13685): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13685): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff76e630100 a2=0 a3=0 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13685): avc: denied { search } for pid=75900 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13686): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13686): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff76e618420 a2=0 a3=0 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13686): avc: denied { search } for pid=75900 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13687): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13687): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff76e618840 a2=0 a3=0 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13687): avc: denied { search } for pid=75900 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13688): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13688): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff76e6182d0 a2=0 a3=0 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13688): avc: denied { search } for pid=75900 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13689): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13689): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff76e618510 a2=0 a3=0 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13689): avc: denied { search } for pid=75900 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13690): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13690): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=562b8fa9b950 a2=345 a3=7ff7719b1c20 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13690): avc: denied { use } for pid=75900 comm="Wt-8" path="socket:[238647]" dev="sockfs" ino=238647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13691): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13691): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff770f1e750 a2=241 a3=1b6 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13691): avc: denied { search } for pid=75900 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13692): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13692): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=562b8f861cb0 a2=0 a3=0 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13692): avc: denied { search } for pid=75900 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13693): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13693): arch=c000003e syscall=62 success=no exit=-13 a0=127fe a1=a a2=7ff770442de0 a3=0 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13693): avc: denied { signal } for pid=75900 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13694): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13694): arch=c000003e syscall=234 success=no exit=-13 a0=1287c a1=12889 a2=6 a3=8 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13694): avc: denied { signal } for pid=75900 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 22 22:59:51 2026 type=PROCTITLE msg=audit(1779505191.527:13695): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1779505191.527:13695): arch=c000003e syscall=234 success=no exit=-13 a0=1287c a1=12889 a2=6 a3=8 items=0 ppid=75774 pid=75900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1779505191.527:13695): avc: denied { signal } for pid=75900 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"