---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4095): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4095): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55ea29fe1c5d a2=0 a3=0 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4095): avc: denied { read } for pid=22527 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4096): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4096): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55ea29fe1c5d a2=0 a3=0 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4096): avc: denied { read } for pid=22527 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4097): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4097): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f29a6fba5e9 a2=7f29a6364640 a3=0 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4097): avc: denied { search } for pid=22527 comm="Wt-8" name="etc" dev="xvda1" ino=4194433 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4098): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4098): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f29a6fba5e9 a2=80000 a3=0 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4098): avc: denied { search } for pid=22527 comm="Wt-8" name="etc" dev="xvda1" ino=4194433 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4099): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4099): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55ea29febb8d a2=0 a3=0 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4099): avc: denied { search } for pid=22527 comm="Wt-8" name="etc" dev="xvda1" ino=4194433 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4100): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4100): arch=c000003e syscall=0 success=no exit=-13 a0=43 a1=7f29a6362945 a2=1 a3=7f29a6ca8204 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4100): avc: denied { read } for pid=22527 comm="Wt-8" path="pipe:[84618]" dev="pipefs" ino=84618 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4101): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4101): arch=c000003e syscall=1 success=no exit=-13 a0=85 a1=7f29a6362000 a2=1 a3=0 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4101): avc: denied { write } for pid=22527 comm="Wt-8" path="pipe:[84619]" dev="pipefs" ino=84619 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4102): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4102): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f29a3a302c0 a2=0 a3=0 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4102): avc: denied { search } for pid=22527 comm="Wt-8" name="usr" dev="xvda1" ino=13046234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4103): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4103): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f29a3a30040 a2=0 a3=0 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4103): avc: denied { search } for pid=22527 comm="Wt-8" name="usr" dev="xvda1" ino=13046234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4104): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4104): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f29a3a18420 a2=0 a3=0 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4104): avc: denied { search } for pid=22527 comm="Wt-8" name="usr" dev="xvda1" ino=13046234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4105): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4105): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f29a3a188a0 a2=0 a3=0 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4105): avc: denied { search } for pid=22527 comm="Wt-8" name="usr" dev="xvda1" ino=13046234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4106): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4106): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f29a3a189c0 a2=0 a3=0 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4106): avc: denied { search } for pid=22527 comm="Wt-8" name="usr" dev="xvda1" ino=13046234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4107): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4107): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f29a3a18810 a2=0 a3=0 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4107): avc: denied { search } for pid=22527 comm="Wt-8" name="usr" dev="xvda1" ino=13046234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4108): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4108): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=55ea2a21b850 a2=345 a3=7f29a6fb1c20 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4108): avc: denied { use } for pid=22527 comm="Wt-8" path="socket:[64247]" dev="sockfs" ino=64247 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4109): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4109): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f29a6363750 a2=241 a3=1b6 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4109): avc: denied { search } for pid=22527 comm="Wt-8" name="mssql" dev="xvda1" ino=465567941 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="unconfined_u:object_r:mssql_var_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4110): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4110): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55ea29fe1c5d a2=0 a3=0 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4110): avc: denied { read } for pid=22527 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4111): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4111): arch=c000003e syscall=62 success=no exit=-13 a0=57bf a1=a a2=7f29a5845de0 a3=0 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4111): avc: denied { signal } for pid=22527 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4112): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4112): arch=c000003e syscall=234 success=no exit=-13 a0=57ff a1=5804 a2=6 a3=8 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4112): avc: denied { signal } for pid=22527 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:06:07 2026 type=PROCTITLE msg=audit(1776679567.854:4113): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679567.854:4113): arch=c000003e syscall=234 success=no exit=-13 a0=57ff a1=5804 a2=6 a3=8 items=0 ppid=22463 pid=22527 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679567.854:4113): avc: denied { signal } for pid=22527 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"