---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12729): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12729): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=557bc88a0c5d a2=0 a3=0 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12729): avc: denied { search } for pid=73381 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12730): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12730): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=557bc88a0c5d a2=0 a3=0 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12730): avc: denied { search } for pid=73381 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12731): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12731): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7fbf985ba5e9 a2=7fbf97ab9640 a3=0 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12731): avc: denied { search } for pid=73381 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12732): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12732): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf985ba5e9 a2=80000 a3=0 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12732): avc: denied { search } for pid=73381 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12733): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12733): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=557bc88aab81 a2=0 a3=0 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12733): avc: denied { search } for pid=73381 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12734): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12734): arch=c000003e syscall=0 success=no exit=-13 a0=44 a1=7fbf97ab7945 a2=1 a3=7fbf97bf1204 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12734): avc: denied { read } for pid=73381 comm="Wt-8" path="pipe:[249857]" dev="pipefs" ino=249857 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12735): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12735): arch=c000003e syscall=1 success=no exit=-13 a0=86 a1=7fbf97ab7000 a2=1 a3=0 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12735): avc: denied { write } for pid=73381 comm="Wt-8" path="pipe:[249858]" dev="pipefs" ino=249858 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12736): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12736): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf952302c0 a2=0 a3=0 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12736): avc: denied { search } for pid=73381 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12737): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12737): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf95230040 a2=0 a3=0 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12737): avc: denied { search } for pid=73381 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12738): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12738): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf95218ea0 a2=0 a3=0 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12738): avc: denied { search } for pid=73381 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12739): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12739): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf95218ab0 a2=0 a3=0 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12739): avc: denied { search } for pid=73381 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12740): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12740): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf95218a80 a2=0 a3=0 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12740): avc: denied { search } for pid=73381 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12741): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12741): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf95218420 a2=0 a3=0 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12741): avc: denied { search } for pid=73381 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12742): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12742): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=557bc8ada850 a2=345 a3=7fbf985b1c20 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12742): avc: denied { use } for pid=73381 comm="Wt-8" path="socket:[239697]" dev="sockfs" ino=239697 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12743): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12743): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf97ab8750 a2=241 a3=1b6 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12743): avc: denied { search } for pid=73381 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12744): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12744): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=557bc88a0c5d a2=0 a3=0 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12744): avc: denied { search } for pid=73381 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12745): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12745): arch=c000003e syscall=62 success=no exit=-13 a0=11e0d a1=a a2=7fbf97045de0 a3=0 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12745): avc: denied { signal } for pid=73381 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12746): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12746): arch=c000003e syscall=234 success=no exit=-13 a0=11ea5 a1=11eaa a2=6 a3=8 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12746): avc: denied { signal } for pid=73381 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:55:12 2026 type=PROCTITLE msg=audit(1774464912.548:12747): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464912.548:12747): arch=c000003e syscall=234 success=no exit=-13 a0=11ea5 a1=11eaa a2=6 a3=8 items=0 ppid=73229 pid=73381 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464912.548:12747): avc: denied { signal } for pid=73381 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"