---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.476:12246): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.476:12246): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563e83ed6c5d a2=0 a3=0 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.476:12246): avc: denied { search } for pid=69900 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.476:12247): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.476:12247): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563e83ed6c5d a2=0 a3=0 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.476:12247): avc: denied { search } for pid=69900 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.476:12248): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.476:12248): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7fbf38bba5e9 a2=7fbf38894640 a3=0 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.476:12248): avc: denied { search } for pid=69900 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.476:12249): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.476:12249): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf38bba5e9 a2=80000 a3=0 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.476:12249): avc: denied { search } for pid=69900 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.476:12250): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.476:12250): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563e83ee0b8d a2=0 a3=0 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.476:12250): avc: denied { search } for pid=69900 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.476:12251): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.476:12251): arch=c000003e syscall=0 success=no exit=-13 a0=72 a1=7fbf38892945 a2=1 a3=7fbf38c81204 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.476:12251): avc: denied { read } for pid=69900 comm="Wt-8" path="pipe:[239285]" dev="pipefs" ino=239285 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.476:12252): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.476:12252): arch=c000003e syscall=1 success=no exit=-13 a0=84 a1=7fbf38892000 a2=1 a3=0 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.476:12252): avc: denied { write } for pid=69900 comm="Wt-8" path="pipe:[239286]" dev="pipefs" ino=239286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.476:12253): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.476:12253): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf356302c0 a2=0 a3=0 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.476:12253): avc: denied { search } for pid=69900 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.476:12254): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.476:12254): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf35630040 a2=0 a3=0 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.476:12254): avc: denied { search } for pid=69900 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.476:12255): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.476:12255): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf35618840 a2=0 a3=0 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.476:12255): avc: denied { search } for pid=69900 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.476:12256): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.476:12256): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf35618540 a2=0 a3=0 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.476:12256): avc: denied { search } for pid=69900 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.476:12257): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.476:12257): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf35618ae0 a2=0 a3=0 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.476:12257): avc: denied { search } for pid=69900 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.476:12258): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.476:12258): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf35618ea0 a2=0 a3=0 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.476:12258): avc: denied { search } for pid=69900 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.476:12259): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.476:12259): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=563e84110850 a2=345 a3=7fbf38bb1c20 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.476:12259): avc: denied { use } for pid=69900 comm="Wt-8" path="socket:[222827]" dev="sockfs" ino=222827 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.477:12260): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.477:12260): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fbf38893750 a2=241 a3=1b6 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.477:12260): avc: denied { search } for pid=69900 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.477:12261): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.477:12261): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563e83ed6c5d a2=0 a3=0 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.477:12261): avc: denied { search } for pid=69900 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.477:12262): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.477:12262): arch=c000003e syscall=62 success=no exit=-13 a0=110f2 a1=a a2=7fbf37445de0 a3=0 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.477:12262): avc: denied { signal } for pid=69900 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.477:12263): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.477:12263): arch=c000003e syscall=234 success=no exit=-13 a0=1110c a1=11111 a2=6 a3=8 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.477:12263): avc: denied { signal } for pid=69900 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:24:58 2026 type=PROCTITLE msg=audit(1777083898.477:12264): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083898.477:12264): arch=c000003e syscall=234 success=no exit=-13 a0=1110c a1=11111 a2=6 a3=8 items=0 ppid=69874 pid=69900 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083898.477:12264): avc: denied { signal } for pid=69900 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"