---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.533:12158): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.533:12158): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=556cfd368c5d a2=0 a3=0 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.533:12158): avc: denied { search } for pid=68517 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.533:12159): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.533:12159): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=556cfd368c5d a2=0 a3=0 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.533:12159): avc: denied { search } for pid=68517 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.533:12160): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.533:12160): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7fa4be1ba5e9 a2=7fa4bd595640 a3=0 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.533:12160): avc: denied { search } for pid=68517 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.533:12161): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.533:12161): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fa4be1ba5e9 a2=80000 a3=0 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.533:12161): avc: denied { search } for pid=68517 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.533:12162): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.533:12162): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=556cfd372b81 a2=0 a3=0 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.533:12162): avc: denied { search } for pid=68517 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.533:12163): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.533:12163): arch=c000003e syscall=0 success=no exit=-13 a0=43 a1=7fa4bd593945 a2=1 a3=7fa4bded4204 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.533:12163): avc: denied { read } for pid=68517 comm="Wt-8" path="pipe:[236195]" dev="pipefs" ino=236195 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.533:12164): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.533:12164): arch=c000003e syscall=1 success=no exit=-13 a0=85 a1=7fa4bd593000 a2=1 a3=0 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.533:12164): avc: denied { write } for pid=68517 comm="Wt-8" path="pipe:[236196]" dev="pipefs" ino=236196 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.534:12165): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.534:12165): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fa4bac302c0 a2=0 a3=0 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.534:12165): avc: denied { search } for pid=68517 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.534:12166): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.534:12166): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fa4bac30040 a2=0 a3=0 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.534:12166): avc: denied { search } for pid=68517 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.534:12167): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.534:12167): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fa4bac18420 a2=0 a3=0 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.534:12167): avc: denied { search } for pid=68517 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.534:12168): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.534:12168): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fa4bac189f0 a2=0 a3=0 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.534:12168): avc: denied { search } for pid=68517 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.534:12169): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.534:12169): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fa4bac18ae0 a2=0 a3=0 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.534:12169): avc: denied { search } for pid=68517 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.534:12170): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.534:12170): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fa4bac184e0 a2=0 a3=0 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.534:12170): avc: denied { search } for pid=68517 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.534:12171): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.534:12171): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=556cfd5a2850 a2=345 a3=7fa4be1b1c20 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.534:12171): avc: denied { use } for pid=68517 comm="Wt-8" path="socket:[218826]" dev="sockfs" ino=218826 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.534:12172): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.534:12172): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fa4bd594750 a2=241 a3=1b6 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.534:12172): avc: denied { search } for pid=68517 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.534:12173): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.534:12173): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=556cfd368c5d a2=0 a3=0 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.534:12173): avc: denied { search } for pid=68517 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.534:12174): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.534:12174): arch=c000003e syscall=62 success=no exit=-13 a0=10b8b a1=a a2=7fa4bca47de0 a3=0 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.534:12174): avc: denied { signal } for pid=68517 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.534:12175): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.534:12175): arch=c000003e syscall=234 success=no exit=-13 a0=10ba5 a1=10baa a2=6 a3=8 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.534:12175): avc: denied { signal } for pid=68517 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 13:28:25 2026 type=PROCTITLE msg=audit(1774459705.534:12176): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774459705.534:12176): arch=c000003e syscall=234 success=no exit=-13 a0=10ba5 a1=10baa a2=6 a3=8 items=0 ppid=68491 pid=68517 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774459705.534:12176): avc: denied { signal } for pid=68517 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"