---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.478:6672): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.478:6672): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55ba652edc5d a2=0 a3=0 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.478:6672): avc: denied { search } for pid=31973 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.478:6673): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.478:6673): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55ba652edc5d a2=0 a3=0 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.478:6673): avc: denied { search } for pid=31973 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.478:6674): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.478:6674): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7fdbac3ba5e9 a2=7fdbab74b640 a3=0 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.478:6674): avc: denied { search } for pid=31973 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.478:6675): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.478:6675): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fdbac3ba5e9 a2=80000 a3=0 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.478:6675): avc: denied { search } for pid=31973 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.478:6676): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.478:6676): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55ba652f7b81 a2=0 a3=0 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.478:6676): avc: denied { search } for pid=31973 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.478:6677): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.478:6677): arch=c000003e syscall=0 success=no exit=-13 a0=7d a1=7fdbab749945 a2=1 a3=7fdbac091204 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.478:6677): avc: denied { read } for pid=31973 comm="Wt-8" path="pipe:[131891]" dev="pipefs" ino=131891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.479:6678): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.479:6678): arch=c000003e syscall=1 success=no exit=-13 a0=85 a1=7fdbab749000 a2=1 a3=0 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.479:6678): avc: denied { write } for pid=31973 comm="Wt-8" path="pipe:[131892]" dev="pipefs" ino=131892 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.479:6679): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.479:6679): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fdba8e302c0 a2=0 a3=0 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.479:6679): avc: denied { search } for pid=31973 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.479:6680): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.479:6680): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fdba8e30040 a2=0 a3=0 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.479:6680): avc: denied { search } for pid=31973 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.479:6681): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.479:6681): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fdba8e18420 a2=0 a3=0 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.479:6681): avc: denied { search } for pid=31973 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.479:6682): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.479:6682): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fdba8e18780 a2=0 a3=0 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.479:6682): avc: denied { search } for pid=31973 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.479:6683): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.479:6683): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fdba8e184b0 a2=0 a3=0 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.479:6683): avc: denied { search } for pid=31973 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.479:6684): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.479:6684): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fdba8e18e10 a2=0 a3=0 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.479:6684): avc: denied { search } for pid=31973 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.479:6685): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.479:6685): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=55ba65527850 a2=345 a3=7fdbac3b1c20 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.479:6685): avc: denied { use } for pid=31973 comm="Wt-8" path="socket:[90391]" dev="sockfs" ino=90391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.479:6686): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.479:6686): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fdbab74a750 a2=241 a3=1b6 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.479:6686): avc: denied { search } for pid=31973 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.479:6687): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.479:6687): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55ba652edc5d a2=0 a3=0 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.479:6687): avc: denied { search } for pid=31973 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.479:6688): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.479:6688): arch=c000003e syscall=62 success=no exit=-13 a0=7ca5 a1=a a2=7fdbaac45de0 a3=0 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.479:6688): avc: denied { signal } for pid=31973 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.479:6689): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.479:6689): arch=c000003e syscall=234 success=no exit=-13 a0=7ce5 a1=7cea a2=6 a3=8 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.479:6689): avc: denied { signal } for pid=31973 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 14:25:25 2026 type=PROCTITLE msg=audit(1774549525.479:6690): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774549525.479:6690): arch=c000003e syscall=234 success=no exit=-13 a0=7ce5 a1=7cea a2=6 a3=8 items=0 ppid=31909 pid=31973 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774549525.479:6690): avc: denied { signal } for pid=31973 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"