---- time->Wed Mar 25 14:50:57 2026 type=PROCTITLE msg=audit(1774464657.335:6189): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774464657.335:6189): arch=c000003e syscall=262 success=no exit=-2 a0=ffffff9c a1=7f33fe3f33c0 a2=7f33fe27e0c0 a3=0 items=0 ppid=35345 pid=35409 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="sqlservr" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774464657.335:6189): avc: denied { search } for pid=35409 comm="sqlservr" name="mssql" dev="xvda1" ino=301990092 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" type=AVC msg=audit(1774464657.335:6189): avc: denied { search } for pid=35409 comm="sqlservr" name="var" dev="xvda1" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" type=AVC msg=audit(1774464657.335:6189): avc: denied { search } for pid=35409 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:51:23 2026 type=AVC msg=audit(1774464683.297:7261): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:51:23 2026 type=AVC msg=audit(1774464683.301:7265): avc: denied { read } for pid=528 comm="systemd-journal" name="status" dev="proc" ino=104875 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:51:23 2026 type=AVC msg=audit(1774464683.301:7266): avc: denied { open } for pid=528 comm="systemd-journal" path="/proc/35409/status" dev="proc" ino=104875 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:51:23 2026 type=AVC msg=audit(1774464683.301:7267): avc: denied { getattr } for pid=528 comm="systemd-journal" path="/proc/35409/status" dev="proc" ino=104875 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:51:23 2026 type=AVC msg=audit(1774464683.301:7268): avc: denied { ioctl } for pid=528 comm="systemd-journal" path="/proc/35409/status" dev="proc" ino=104875 ioctlcmd=0x5401 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:51:23 2026 type=AVC msg=audit(1774464683.301:7269): avc: denied { read } for pid=528 comm="systemd-journal" name="exe" dev="proc" ino=108261 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Mar 25 14:51:23 2026 type=AVC msg=audit(1774464683.301:7270): avc: denied { getattr } for pid=528 comm="systemd-journal" scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0"