---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.029:16766): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.029:16766): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f0091da4460 a2=7f0091c7e0c0 a3=0 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="sqlservr" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.029:16766): avc: denied { search } for pid=92455 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.320:16767): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.320:16767): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5588c4824c5d a2=0 a3=0 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.320:16767): avc: denied { search } for pid=92455 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.320:16768): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.320:16768): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5588c4824c5d a2=0 a3=0 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.320:16768): avc: denied { search } for pid=92455 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.320:16769): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.320:16769): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f00935ba5e9 a2=7f009297a640 a3=0 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.320:16769): avc: denied { search } for pid=92455 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.320:16770): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.320:16770): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f00935ba5e9 a2=80000 a3=0 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.320:16770): avc: denied { search } for pid=92455 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.320:16771): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.320:16771): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5588c482eb8d a2=0 a3=0 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.320:16771): avc: denied { search } for pid=92455 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.320:16772): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.320:16772): arch=c000003e syscall=0 success=no exit=-13 a0=44 a1=7f0092978945 a2=1 a3=7f00932bc204 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.320:16772): avc: denied { read } for pid=92455 comm="Wt-8" path="pipe:[351338]" dev="pipefs" ino=351338 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.320:16773): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.320:16773): arch=c000003e syscall=1 success=no exit=-13 a0=85 a1=7f0092978000 a2=1 a3=0 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.320:16773): avc: denied { write } for pid=92455 comm="Wt-8" path="pipe:[351339]" dev="pipefs" ino=351339 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.320:16774): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.320:16774): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f00900302c0 a2=0 a3=0 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.320:16774): avc: denied { search } for pid=92455 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.320:16775): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.320:16775): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0090030040 a2=0 a3=0 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.320:16775): avc: denied { search } for pid=92455 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.320:16776): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.320:16776): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0090018ea0 a2=0 a3=0 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.320:16776): avc: denied { search } for pid=92455 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.320:16777): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.320:16777): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f00900187e0 a2=0 a3=0 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.320:16777): avc: denied { search } for pid=92455 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.320:16778): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.320:16778): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0090018870 a2=0 a3=0 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.320:16778): avc: denied { search } for pid=92455 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.321:16779): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.321:16779): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0090018420 a2=0 a3=0 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.321:16779): avc: denied { search } for pid=92455 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.321:16780): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.321:16780): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=5588c4a5e850 a2=345 a3=7f00935b1c20 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.321:16780): avc: denied { use } for pid=92455 comm="Wt-8" path="socket:[332253]" dev="sockfs" ino=332253 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.321:16781): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.321:16781): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0092979750 a2=241 a3=1b6 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.321:16781): avc: denied { search } for pid=92455 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.321:16782): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.321:16782): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5588c4824c5d a2=0 a3=0 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.321:16782): avc: denied { search } for pid=92455 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.321:16783): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.321:16783): arch=c000003e syscall=62 success=no exit=-13 a0=1690c a1=a a2=7f0091e47de0 a3=0 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.321:16783): avc: denied { signal } for pid=92455 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.321:16784): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.321:16784): arch=c000003e syscall=234 success=no exit=-13 a0=16927 a1=1692c a2=6 a3=8 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.321:16784): avc: denied { signal } for pid=92455 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Apr 24 22:26:19 2026 type=PROCTITLE msg=audit(1777083979.321:16785): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777083979.321:16785): arch=c000003e syscall=234 success=no exit=-13 a0=16927 a1=1692c a2=6 a3=8 items=0 ppid=92428 pid=92455 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777083979.321:16785): avc: denied { signal } for pid=92455 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"