---- time->Thu Mar 19 17:47:48 2026 type=PROCTITLE msg=audit(1773956868.123:6169): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773956868.123:6169): arch=c000003e syscall=262 success=no exit=-2 a0=ffffff9c a1=7efea8ff34c0 a2=7efea8e7e0c0 a3=0 items=0 ppid=35311 pid=35375 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="sqlservr" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773956868.123:6169): avc: denied { search } for pid=35375 comm="sqlservr" name="mssql" dev="xvda1" ino=301990092 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" type=AVC msg=audit(1773956868.123:6169): avc: denied { search } for pid=35375 comm="sqlservr" name="var" dev="xvda1" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 19 17:47:50 2026 type=PROCTITLE msg=audit(1773956870.123:6235): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773956870.123:6235): arch=c000003e syscall=262 success=no exit=-2 a0=ffffff9c a1=7efea8ff34c0 a2=7efea8e7e0c0 a3=0 items=0 ppid=35311 pid=35375 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="sqlservr" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773956870.123:6235): avc: denied { search } for pid=35375 comm="sqlservr" name="mssql" dev="xvda1" ino=301990092 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" type=AVC msg=audit(1773956870.123:6235): avc: denied { search } for pid=35375 comm="sqlservr" name="var" dev="xvda1" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 19 17:48:14 2026 type=AVC msg=audit(1773956894.538:7251): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 19 17:48:14 2026 type=AVC msg=audit(1773956894.541:7255): avc: denied { read } for pid=536 comm="systemd-journal" name="status" dev="proc" ino=105494 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 19 17:48:14 2026 type=AVC msg=audit(1773956894.541:7256): avc: denied { open } for pid=536 comm="systemd-journal" path="/proc/35375/status" dev="proc" ino=105494 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 19 17:48:14 2026 type=AVC msg=audit(1773956894.541:7257): avc: denied { getattr } for pid=536 comm="systemd-journal" path="/proc/35375/status" dev="proc" ino=105494 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 19 17:48:14 2026 type=AVC msg=audit(1773956894.541:7258): avc: denied { ioctl } for pid=536 comm="systemd-journal" path="/proc/35375/status" dev="proc" ino=105494 ioctlcmd=0x5401 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 19 17:48:14 2026 type=AVC msg=audit(1773956894.541:7259): avc: denied { read } for pid=536 comm="systemd-journal" name="exe" dev="proc" ino=106129 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 19 17:48:14 2026 type=AVC msg=audit(1773956894.542:7260): avc: denied { getattr } for pid=536 comm="systemd-journal" scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0"