----
time->Thu Mar 26 13:01:32 2026
type=PROCTITLE msg=audit(1774544492.991:7155): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544492.991:7155): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f59c9bf33c0 a2=7f59c9a7e0c0 a3=0 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="sqlservr" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544492.991:7155): avc:  denied  { search } for  pid=33235 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.306:7156): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.306:7156): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55d82b141c5d a2=0 a3=0 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.306:7156): avc:  denied  { search } for  pid=33235 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.306:7157): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.306:7157): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55d82b141c5d a2=0 a3=0 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.306:7157): avc:  denied  { search } for  pid=33235 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.306:7158): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.306:7158): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f59cb1ba5e9 a2=7f59ca6af640 a3=0 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.306:7158): avc:  denied  { search } for  pid=33235 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.306:7159): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.306:7159): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f59cb1ba5e9 a2=80000 a3=0 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.306:7159): avc:  denied  { search } for  pid=33235 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.306:7160): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.306:7160): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55d82b14bb81 a2=0 a3=0 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.306:7160): avc:  denied  { search } for  pid=33235 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.307:7161): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.307:7161): arch=c000003e syscall=0 success=no exit=-13 a0=7d a1=7f59ca6ad945 a2=1 a3=7f59ca7f1204 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.307:7161): avc:  denied  { read } for  pid=33235 comm="Wt-8" path="pipe:[130438]" dev="pipefs" ino=130438 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.307:7162): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.307:7162): arch=c000003e syscall=1 success=no exit=-13 a0=85 a1=7f59ca6ad000 a2=1 a3=0 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.307:7162): avc:  denied  { write } for  pid=33235 comm="Wt-8" path="pipe:[130439]" dev="pipefs" ino=130439 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.307:7163): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.307:7163): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f59c7e302c0 a2=0 a3=0 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.307:7163): avc:  denied  { search } for  pid=33235 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.307:7164): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.307:7164): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f59c7e30040 a2=0 a3=0 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.307:7164): avc:  denied  { search } for  pid=33235 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.307:7165): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.307:7165): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f59c7e18ea0 a2=0 a3=0 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.307:7165): avc:  denied  { search } for  pid=33235 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.307:7166): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.307:7166): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f59c7e18b10 a2=0 a3=0 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.307:7166): avc:  denied  { search } for  pid=33235 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.307:7167): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.307:7167): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f59c7e188a0 a2=0 a3=0 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.307:7167): avc:  denied  { search } for  pid=33235 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.307:7168): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.307:7168): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f59c7e18420 a2=0 a3=0 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.307:7168): avc:  denied  { search } for  pid=33235 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.307:7169): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.307:7169): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=55d82b37b850 a2=345 a3=7f59cb1b1c20 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.307:7169): avc:  denied  { use } for  pid=33235 comm="Wt-8" path="socket:[89218]" dev="sockfs" ino=89218 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.307:7170): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.307:7170): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f59ca6ae750 a2=241 a3=1b6 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.307:7170): avc:  denied  { search } for  pid=33235 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.307:7171): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.307:7171): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55d82b141c5d a2=0 a3=0 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.307:7171): avc:  denied  { search } for  pid=33235 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.307:7172): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.307:7172): arch=c000003e syscall=62 success=no exit=-13 a0=8193 a1=a a2=7f59c9c45de0 a3=0 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.307:7172): avc:  denied  { signal } for  pid=33235 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.307:7173): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.307:7173): arch=c000003e syscall=234 success=no exit=-13 a0=81d3 a1=81d8 a2=6 a3=8 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.307:7173): avc:  denied  { signal } for  pid=33235 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 13:01:33 2026
type=PROCTITLE msg=audit(1774544493.307:7174): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774544493.307:7174): arch=c000003e syscall=234 success=no exit=-13 a0=81d3 a1=81d8 a2=6 a3=8 items=0 ppid=33171 pid=33235 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774544493.307:7174): avc:  denied  { signal } for  pid=33235 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"