---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7157): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7157): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5575f6ffec5d a2=0 a3=0 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7157): avc: denied { search } for pid=33242 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7158): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7158): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5575f6ffec5d a2=0 a3=0 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7158): avc: denied { search } for pid=33242 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7159): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7159): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f90a87ba5e9 a2=7f90a7d03640 a3=0 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7159): avc: denied { search } for pid=33242 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7160): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7160): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f90a87ba5e9 a2=80000 a3=0 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7160): avc: denied { search } for pid=33242 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7161): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7161): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5575f7008b81 a2=0 a3=0 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7161): avc: denied { search } for pid=33242 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7162): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7162): arch=c000003e syscall=0 success=no exit=-13 a0=7e a1=7f90a7d01945 a2=1 a3=7f90a8850204 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7162): avc: denied { read } for pid=33242 comm="Wt-8" path="pipe:[130479]" dev="pipefs" ino=130479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7163): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7163): arch=c000003e syscall=1 success=no exit=-13 a0=86 a1=7f90a7d01000 a2=1 a3=0 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7163): avc: denied { write } for pid=33242 comm="Wt-8" path="pipe:[130480]" dev="pipefs" ino=130480 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7164): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7164): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f90a54302c0 a2=0 a3=0 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7164): avc: denied { search } for pid=33242 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7165): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7165): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f90a5430040 a2=0 a3=0 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7165): avc: denied { search } for pid=33242 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7166): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7166): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f90a5418420 a2=0 a3=0 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7166): avc: denied { search } for pid=33242 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7167): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7167): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f90a5418ae0 a2=0 a3=0 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7167): avc: denied { search } for pid=33242 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7168): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7168): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f90a5418990 a2=0 a3=0 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7168): avc: denied { search } for pid=33242 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7169): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7169): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f90a5418c90 a2=0 a3=0 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7169): avc: denied { search } for pid=33242 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7170): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7170): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=5575f7238850 a2=345 a3=7f90a87b1c20 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7170): avc: denied { use } for pid=33242 comm="Wt-8" path="socket:[88663]" dev="sockfs" ino=88663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7171): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7171): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f90a7d02750 a2=241 a3=1b6 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7171): avc: denied { search } for pid=33242 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7172): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7172): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5575f6ffec5d a2=0 a3=0 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7172): avc: denied { search } for pid=33242 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7173): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7173): arch=c000003e syscall=62 success=no exit=-13 a0=819a a1=a a2=7f90a7245de0 a3=0 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7173): avc: denied { signal } for pid=33242 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7174): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7174): arch=c000003e syscall=234 success=no exit=-13 a0=81da a1=81df a2=6 a3=8 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7174): avc: denied { signal } for pid=33242 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:24:34 2026 type=PROCTITLE msg=audit(1774459474.818:7175): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459474.818:7175): arch=c000003e syscall=234 success=no exit=-13 a0=81da a1=81df a2=6 a3=8 items=0 ppid=33178 pid=33242 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459474.818:7175): avc: denied { signal } for pid=33242 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"