---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.576:12249): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.576:12249): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=562584cf0c5d a2=0 a3=0 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.576:12249): avc: denied { search } for pid=69807 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.576:12250): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.576:12250): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=562584cf0c5d a2=0 a3=0 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.576:12250): avc: denied { search } for pid=69807 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.576:12251): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.576:12251): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f0bc1dba5e9 a2=7f0bc1a8a640 a3=0 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.576:12251): avc: denied { search } for pid=69807 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.576:12252): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.576:12252): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0bc1dba5e9 a2=80000 a3=0 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.576:12252): avc: denied { search } for pid=69807 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.576:12253): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.576:12253): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=562584cfab8d a2=0 a3=0 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.576:12253): avc: denied { search } for pid=69807 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.576:12254): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.576:12254): arch=c000003e syscall=0 success=no exit=-13 a0=73 a1=7f0bc1a88945 a2=1 a3=7f0bc1e73204 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.576:12254): avc: denied { read } for pid=69807 comm="Wt-8" path="pipe:[241714]" dev="pipefs" ino=241714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.576:12255): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.576:12255): arch=c000003e syscall=1 success=no exit=-13 a0=84 a1=7f0bc1a88000 a2=1 a3=0 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.576:12255): avc: denied { write } for pid=69807 comm="Wt-8" path="pipe:[241715]" dev="pipefs" ino=241715 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.576:12256): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.576:12256): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0bbe8302c0 a2=0 a3=0 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.576:12256): avc: denied { search } for pid=69807 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.576:12257): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.576:12257): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0bbe830040 a2=0 a3=0 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.576:12257): avc: denied { search } for pid=69807 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.576:12258): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.576:12258): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0bbe818ea0 a2=0 a3=0 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.576:12258): avc: denied { search } for pid=69807 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.576:12259): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.576:12259): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0bbe8188d0 a2=0 a3=0 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.576:12259): avc: denied { search } for pid=69807 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.576:12260): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.576:12260): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0bbe8189c0 a2=0 a3=0 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.576:12260): avc: denied { search } for pid=69807 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.576:12261): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.576:12261): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0bbe818420 a2=0 a3=0 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.576:12261): avc: denied { search } for pid=69807 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.576:12262): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.576:12262): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=562584f2a850 a2=345 a3=7f0bc1db1c20 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.576:12262): avc: denied { use } for pid=69807 comm="Wt-8" path="socket:[224359]" dev="sockfs" ino=224359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.577:12263): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.577:12263): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0bc1a89750 a2=241 a3=1b6 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.577:12263): avc: denied { search } for pid=69807 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.577:12264): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.577:12264): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=562584cf0c5d a2=0 a3=0 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.577:12264): avc: denied { search } for pid=69807 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.577:12265): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.577:12265): arch=c000003e syscall=62 success=no exit=-13 a0=11095 a1=a a2=7f0bc0645de0 a3=0 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.577:12265): avc: denied { signal } for pid=69807 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.577:12266): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.577:12266): arch=c000003e syscall=234 success=no exit=-13 a0=110af a1=110b4 a2=6 a3=8 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.577:12266): avc: denied { signal } for pid=69807 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Mon Apr 20 06:12:30 2026 type=PROCTITLE msg=audit(1776679950.577:12267): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1776679950.577:12267): arch=c000003e syscall=234 success=no exit=-13 a0=110af a1=110b4 a2=6 a3=8 items=0 ppid=69781 pid=69807 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1776679950.577:12267): avc: denied { signal } for pid=69807 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"