---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4074): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4074): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=560c6560dc5d a2=0 a3=0 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4074): avc: denied { search } for pid=22397 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4075): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4075): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=560c6560dc5d a2=0 a3=0 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4075): avc: denied { search } for pid=22397 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4076): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4076): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f3cfffba5e9 a2=7f3cff35e640 a3=0 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4076): avc: denied { search } for pid=22397 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4077): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4077): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3cfffba5e9 a2=80000 a3=0 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4077): avc: denied { search } for pid=22397 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4078): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4078): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=560c65617b81 a2=0 a3=0 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4078): avc: denied { search } for pid=22397 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4079): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4079): arch=c000003e syscall=0 success=no exit=-13 a0=44 a1=7f3cff35c945 a2=1 a3=7f3cffc96204 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4079): avc: denied { read } for pid=22397 comm="Wt-8" path="pipe:[87043]" dev="pipefs" ino=87043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4080): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4080): arch=c000003e syscall=1 success=no exit=-13 a0=85 a1=7f3cff35c000 a2=1 a3=0 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4080): avc: denied { write } for pid=22397 comm="Wt-8" path="pipe:[87044]" dev="pipefs" ino=87044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4081): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4081): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3cfca302c0 a2=0 a3=0 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4081): avc: denied { search } for pid=22397 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4082): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4082): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3cfca30040 a2=0 a3=0 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4082): avc: denied { search } for pid=22397 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4083): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4083): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3cfca18420 a2=0 a3=0 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4083): avc: denied { search } for pid=22397 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4084): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4084): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3cfca18a50 a2=0 a3=0 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4084): avc: denied { search } for pid=22397 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4085): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4085): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3cfca18540 a2=0 a3=0 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4085): avc: denied { search } for pid=22397 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4086): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4086): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3cfca18570 a2=0 a3=0 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4086): avc: denied { search } for pid=22397 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4087): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4087): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=560c65847850 a2=345 a3=7f3cfffb1c20 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4087): avc: denied { use } for pid=22397 comm="Wt-8" path="socket:[65908]" dev="sockfs" ino=65908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4088): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4088): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3cff35d750 a2=241 a3=1b6 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4088): avc: denied { search } for pid=22397 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4089): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4089): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=560c6560dc5d a2=0 a3=0 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4089): avc: denied { search } for pid=22397 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4090): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4090): arch=c000003e syscall=62 success=no exit=-13 a0=573d a1=a a2=7f3cfe845de0 a3=0 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4090): avc: denied { signal } for pid=22397 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4091): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4091): arch=c000003e syscall=234 success=no exit=-13 a0=577d a1=5782 a2=6 a3=8 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4091): avc: denied { signal } for pid=22397 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:46:01 2026 type=PROCTITLE msg=audit(1774532761.564:4092): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532761.564:4092): arch=c000003e syscall=234 success=no exit=-13 a0=577d a1=5782 a2=6 a3=8 items=0 ppid=22333 pid=22397 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532761.564:4092): avc: denied { signal } for pid=22397 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"