---- time->Thu Aug 7 05:57:58 2025 type=AVC msg=audit(1754560678.294:17416): avc: denied { connectto } for pid=96840 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Thu Aug 7 05:57:58 2025 type=AVC msg=audit(1754560678.321:17417): avc: denied { read } for pid=96848 comm="systemctl" name="journal" dev="xvda2" ino=1805 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=1 ---- time->Thu Aug 7 05:57:58 2025 type=AVC msg=audit(1754560678.321:17418): avc: denied { read } for pid=96848 comm="systemctl" name="system@7a63c72545a247af9972c1023ada8764-0000000000000f4f-00063bc352fa624e.journal" dev="xvda2" ino=1980 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:57:58 2025 type=AVC msg=audit(1754560678.321:17419): avc: denied { read open } for pid=96848 comm="systemctl" path="/var/log/journal/ec2cd616b578acb4c22d72692d9f40c5/system@7a63c72545a247af9972c1023ada8764-0000000000000f4f-00063bc352fa624e.journal" dev="xvda2" ino=1980 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:57:58 2025 type=AVC msg=audit(1754560678.321:17420): avc: denied { map } for pid=96848 comm="systemctl" path="/var/log/journal/ec2cd616b578acb4c22d72692d9f40c5/system@7a63c72545a247af9972c1023ada8764-0000000000000f4f-00063bc352fa624e.journal" dev="xvda2" ino=1980 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:57:58 2025 type=AVC msg=audit(1754560678.324:17421): avc: denied { getattr } for pid=96849 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158605 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:57:58 2025 type=AVC msg=audit(1754560678.324:17422): avc: denied { execute } for pid=96849 comm="sh" name="rpm" dev="xvda2" ino=158605 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:57:58 2025 type=AVC msg=audit(1754560678.324:17423): avc: denied { read } for pid=96849 comm="sh" name="rpm" dev="xvda2" ino=158605 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:57:58 2025 type=AVC msg=audit(1754560678.324:17424): avc: denied { open } for pid=96850 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158605 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:57:58 2025 type=AVC msg=audit(1754560678.324:17425): avc: denied { execute_no_trans } for pid=96850 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158605 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:57:58 2025 type=AVC msg=audit(1754560678.324:17426): avc: denied { map } for pid=96850 comm="rpm" path="/usr/bin/rpm" dev="xvda2" ino=158605 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:57:58 2025 type=AVC msg=audit(1754560678.329:17427): avc: denied { search } for pid=96850 comm="rpm" name="rpm" dev="xvda2" ino=131076 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir permissive=1 ---- time->Thu Aug 7 05:57:58 2025 type=AVC msg=audit(1754560678.329:17428): avc: denied { open } for pid=96850 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite" dev="xvda2" ino=131077 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:57:58 2025 type=AVC msg=audit(1754560678.329:17429): avc: denied { setattr } for pid=96850 comm="rpm" name="rpmdb.sqlite-wal" dev="xvda2" ino=131078 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:57:58 2025 type=AVC msg=audit(1754560678.329:17430): avc: denied { map } for pid=96850 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite-shm" dev="xvda2" ino=131079 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:58:05 2025 type=AVC msg=audit(1754560685.423:17437): avc: denied { search } for pid=97059 comm="(sd-askpwagent)" name="fs" dev="proc" ino=147 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 ---- time->Thu Aug 7 05:58:05 2025 type=AVC msg=audit(1754560685.424:17438): avc: denied { read } for pid=97059 comm="(sd-askpwagent)" name="nr_open" dev="proc" ino=148 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:58:05 2025 type=AVC msg=audit(1754560685.424:17439): avc: denied { open } for pid=97059 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=148 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:58:05 2025 type=AVC msg=audit(1754560685.424:17440): avc: denied { getattr } for pid=97059 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=148 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:58:05 2025 type=AVC msg=audit(1754560685.424:17441): avc: denied { ioctl } for pid=97059 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=148 ioctlcmd=0x5401 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Thu Aug 7 05:58:05 2025 type=AVC msg=audit(1754560685.427:17443): avc: denied { read } for pid=97059 comm="systemd-tty-ask" name="ask-password" dev="tmpfs" ino=22 scontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 ---- time->Thu Aug 7 05:58:05 2025 type=AVC msg=audit(1754560685.427:17444): avc: denied { watch } for pid=97059 comm="systemd-tty-ask" path="/run/user/0/systemd/ask-password" dev="tmpfs" ino=22 scontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 ---- time->Thu Aug 7 05:58:05 2025 type=AVC msg=audit(1754560685.431:17446): avc: denied { signal } for pid=97058 comm="systemctl" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tclass=process permissive=1 ---- time->Thu Aug 7 05:58:28 2025 type=AVC msg=audit(1754560708.269:18076): avc: denied { connectto } for pid=101214 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Thu Aug 7 05:58:35 2025 type=AVC msg=audit(1754560715.024:18347): avc: denied { name_connect } for pid=102643 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Thu Aug 7 05:59:15 2025 type=AVC msg=audit(1754560755.869:19397): avc: denied { connectto } for pid=109033 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Thu Aug 7 05:59:23 2025 type=AVC msg=audit(1754560763.494:19728): avc: denied { name_connect } for pid=110773 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Thu Aug 7 06:00:02 2025 type=AVC msg=audit(1754560802.442:20906): avc: denied { connectto } for pid=116957 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Thu Aug 7 06:00:09 2025 type=AVC msg=audit(1754560809.809:21237): avc: denied { name_connect } for pid=118697 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Thu Aug 7 06:00:45 2025 type=AVC msg=audit(1754560845.038:22203): avc: denied { connectto } for pid=123948 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Thu Aug 7 06:00:52 2025 type=AVC msg=audit(1754560852.170:22534): avc: denied { name_connect } for pid=125689 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Thu Aug 7 06:01:38 2025 type=AVC msg=audit(1754560898.013:23812): avc: denied { connectto } for pid=132285 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Thu Aug 7 06:01:45 2025 type=AVC msg=audit(1754560905.316:24143): avc: denied { name_connect } for pid=134026 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Thu Aug 7 06:02:20 2025 type=AVC msg=audit(1754560940.452:25078): avc: denied { connectto } for pid=139197 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Thu Aug 7 06:02:27 2025 type=AVC msg=audit(1754560947.574:25409): avc: denied { name_connect } for pid=140938 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Thu Aug 7 06:03:01 2025 type=AVC msg=audit(1754560981.985:25987): avc: denied { search } for pid=141415 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:01 2025 type=AVC msg=audit(1754560981.985:25988): avc: denied { search } for pid=141415 comm="Wt-8" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:01 2025 type=AVC msg=audit(1754560981.985:25989): avc: denied { read } for pid=141415 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:01 2025 type=AVC msg=audit(1754560981.985:25990): avc: denied { search } for pid=141415 comm="Wt-8" name="141415" dev="proc" ino=557349 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:01 2025 type=AVC msg=audit(1754560981.985:25991): avc: denied { read } for pid=141415 comm="Wt-8" name="statm" dev="proc" ino=558596 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:01 2025 type=AVC msg=audit(1754560981.985:25992): avc: denied { open } for pid=141415 comm="Wt-8" path="/proc/141415/statm" dev="proc" ino=558596 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:01 2025 type=AVC msg=audit(1754560981.985:25993): avc: denied { getattr } for pid=141415 comm="Wt-8" path="/proc/141415/statm" dev="proc" ino=558596 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:01 2025 type=AVC msg=audit(1754560981.985:25994): avc: denied { read } for pid=141415 comm="Wt-8" name="meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:01 2025 type=AVC msg=audit(1754560981.985:25995): avc: denied { open } for pid=141415 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:01 2025 type=AVC msg=audit(1754560981.985:25996): avc: denied { getattr } for pid=141415 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:01 2025 type=AVC msg=audit(1754560981.985:25997): avc: denied { search } for pid=141415 comm="Wt-8" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:01 2025 type=AVC msg=audit(1754560981.985:25998): avc: denied { search } for pid=141415 comm="Wt-8" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:01 2025 type=AVC msg=audit(1754560981.985:25999): avc: denied { getattr } for pid=141415 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10622 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:01 2025 type=AVC msg=audit(1754560981.985:26000): avc: denied { read } for pid=141415 comm="Wt-8" name="memory.max" dev="cgroup2" ino=10622 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:01 2025 type=AVC msg=audit(1754560981.985:26001): avc: denied { open } for pid=141415 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10622 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.229:26002): avc: denied { fork } for pid=141415 comm="Wt-168" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.229:26003): avc: denied { setsched } for pid=141415 comm="Wt-168" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.229:26004): avc: denied { getsched } for pid=141415 comm="Wt-168" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.985:26005): avc: denied { search } for pid=141415 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.985:26006): avc: denied { search } for pid=141415 comm="Wt-8" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.985:26007): avc: denied { read } for pid=141415 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.985:26008): avc: denied { search } for pid=141415 comm="Wt-8" name="141415" dev="proc" ino=557349 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.985:26009): avc: denied { read } for pid=141415 comm="Wt-8" name="statm" dev="proc" ino=558596 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.985:26010): avc: denied { open } for pid=141415 comm="Wt-8" path="/proc/141415/statm" dev="proc" ino=558596 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.985:26011): avc: denied { getattr } for pid=141415 comm="Wt-8" path="/proc/141415/statm" dev="proc" ino=558596 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.985:26012): avc: denied { read } for pid=141415 comm="Wt-8" name="meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.985:26013): avc: denied { open } for pid=141415 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.985:26014): avc: denied { getattr } for pid=141415 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.986:26015): avc: denied { search } for pid=141415 comm="Wt-8" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.986:26016): avc: denied { search } for pid=141415 comm="Wt-8" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.986:26017): avc: denied { getattr } for pid=141415 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10622 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.986:26018): avc: denied { read } for pid=141415 comm="Wt-8" name="memory.max" dev="cgroup2" ino=10622 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:02 2025 type=AVC msg=audit(1754560982.986:26019): avc: denied { open } for pid=141415 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10622 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.216:26021): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.217:26023): avc: denied { signal } for pid=141258 comm="sqlservr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.217:26024): avc: denied { fork } for pid=141415 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.217:26025): avc: denied { setsched } for pid=141415 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.217:26026): avc: denied { getsched } for pid=141415 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.218:26027): avc: denied { use } for pid=141415 comm="Wt-636" path="socket:[558146]" dev="sockfs" ino=558146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.218:26028): avc: denied { append } for pid=141415 comm="Wt-636" path="socket:[558146]" dev="sockfs" ino=558146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.218:26029): avc: denied { write } for pid=141415 comm="Wt-636" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.220:26030): avc: denied { read } for pid=654 comm="systemd-journal" name="status" dev="proc" ino=558445 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.220:26031): avc: denied { write } for pid=141415 comm="Wt-636" path="/var/opt/mssql/log/errorlog" dev="xvda2" ino=524598 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.220:26032): avc: denied { open } for pid=654 comm="systemd-journal" path="/proc/141415/status" dev="proc" ino=558445 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.220:26033): avc: denied { getattr } for pid=654 comm="systemd-journal" path="/proc/141415/status" dev="proc" ino=558445 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.220:26034): avc: denied { ioctl } for pid=654 comm="systemd-journal" path="/proc/141415/status" dev="proc" ino=558445 ioctlcmd=0x5401 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.220:26035): avc: denied { read } for pid=654 comm="systemd-journal" name="exe" dev="proc" ino=558753 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.220:26036): avc: denied { getattr } for pid=654 comm="systemd-journal" scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26037): avc: denied { search } for pid=141415 comm="Wt-636" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26038): avc: denied { search } for pid=141415 comm="Wt-636" name="var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26039): avc: denied { search } for pid=141415 comm="Wt-636" name="mssql" dev="xvda2" ino=524542 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26040): avc: denied { getattr } for pid=141415 comm="Wt-636" path="/var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26041): avc: denied { getattr } for pid=141415 comm="Wt-636" path="/var/opt/mssql" dev="xvda2" ino=524542 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26042): avc: denied { read } for pid=141415 comm="Wt-636" name="system" dev="xvda2" ino=524549 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26043): avc: denied { open } for pid=141415 comm="Wt-636" path="/var/opt/mssql/.system/system" dev="xvda2" ino=524549 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26044): avc: denied { read } for pid=141415 comm="Wt-636" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26045): avc: denied { open } for pid=141415 comm="Wt-636" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26046): avc: denied { getattr } for pid=141415 comm="Wt-636" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26047): avc: denied { read } for pid=141415 comm="Wt-636" name="sbin" dev="xvda2" ino=823 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26048): avc: denied { search } for pid=141415 comm="Wt-636" name="usr" dev="xvda2" ino=131073 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26049): avc: denied { read } for pid=141415 comm="Wt-636" name="bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26050): avc: denied { getattr } for pid=141415 comm="Wt-636" path="/usr/bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26051): avc: denied { read } for pid=141415 comm="Wt-636" name="lib" dev="xvda2" ino=821 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26052): avc: denied { read } for pid=141415 comm="Wt-636" name="lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.223:26053): avc: denied { getattr } for pid=141415 comm="Wt-636" path="/usr/lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.227:26054): avc: denied { write } for pid=141415 comm="Wt-648" path="/var/opt/mssql/data/model_replicatedmaster.ldf" dev="xvda2" ino=524594 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.261:26055): avc: denied { lock } for pid=141415 comm="Wt-636" path="/var/opt/mssql/data/model_replicatedmaster.mdf" dev="xvda2" ino=524593 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.261:26056): avc: denied { search } for pid=141415 comm="Wt-636" name="etc" dev="xvda2" ino=8193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.261:26057): avc: denied { read } for pid=141415 comm="Wt-636" name="localtime" dev="xvda2" ino=27 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.262:26058): avc: denied { search } for pid=141415 comm="Wt-636" name="zoneinfo" dev="xvda2" ino=131599 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.262:26059): avc: denied { getattr } for pid=141415 comm="Wt-636" path="/usr/share/zoneinfo/America/New_York" dev="xvda2" ino=132393 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.325:26060): avc: denied { read } for pid=141415 comm="Wt-636" path="/var/opt/mssql/data/modellog.ldf" dev="xvda2" ino=524590 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.366:26061): avc: denied { lock } for pid=141415 comm="Wt-636" path="/var/opt/mssql/log/log_7.trc" dev="xvda2" ino=524920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.383:26062): avc: denied { read } for pid=141415 comm="Wt-540" name="krb5.conf" dev="xvda2" ino=1723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Aug 7 06:03:03 2025 type=AVC msg=audit(1754560983.383:26063): avc: denied { getattr } for pid=141415 comm="Wt-540" path="/etc/krb5.conf" dev="xvda2" ino=1723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0"