----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.543:4060): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.543:4060): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f17cabf33e0 a2=7f17caa7e0c0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="sqlservr" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.543:4060): avc:  denied  { search } for  pid=22391 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.836:4061): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.836:4061): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5632e589ac5d a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.836:4061): avc:  denied  { search } for  pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4062): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4062): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5632e589ac5d a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4062): avc:  denied  { search } for  pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4063): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4063): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f17cc3ba5e9 a2=7f17cc03b640 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4063): avc:  denied  { search } for  pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4064): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4064): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f17cc3ba5e9 a2=80000 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4064): avc:  denied  { search } for  pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4065): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4065): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5632e58a4b81 a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4065): avc:  denied  { search } for  pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4066): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4066): arch=c000003e syscall=0 success=no exit=-13 a0=45 a1=7f17cc039945 a2=1 a3=7f17cc425204 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4066): avc:  denied  { read } for  pid=22391 comm="Wt-8" path="pipe:[85479]" dev="pipefs" ino=85479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4067): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4067): arch=c000003e syscall=1 success=no exit=-13 a0=86 a1=7f17cc039000 a2=1 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4067): avc:  denied  { write } for  pid=22391 comm="Wt-8" path="pipe:[85480]" dev="pipefs" ino=85480 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4068): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4068): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f17c8e302c0 a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4068): avc:  denied  { search } for  pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4069): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4069): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f17c8e30040 a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4069): avc:  denied  { search } for  pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4070): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4070): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f17c8e18420 a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4070): avc:  denied  { search } for  pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4071): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4071): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f17c8e188a0 a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4071): avc:  denied  { search } for  pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4072): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4072): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f17c8e187e0 a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4072): avc:  denied  { search } for  pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4073): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4073): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f17c8e18d80 a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4073): avc:  denied  { search } for  pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4074): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4074): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=5632e5ad4850 a2=345 a3=7f17cc3b1c20 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4074): avc:  denied  { use } for  pid=22391 comm="Wt-8" path="socket:[63277]" dev="sockfs" ino=63277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4075): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4075): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f17cc03a750 a2=241 a3=1b6 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4075): avc:  denied  { search } for  pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4076): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4076): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5632e589ac5d a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4076): avc:  denied  { search } for  pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4077): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4077): arch=c000003e syscall=62 success=no exit=-13 a0=5737 a1=a a2=7f17cac45de0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4077): avc:  denied  { signal } for  pid=22391 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4078): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4078): arch=c000003e syscall=234 success=no exit=-13 a0=5777 a1=577c a2=6 a3=8 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4078): avc:  denied  { signal } for  pid=22391 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 26 12:31:15 2026
type=PROCTITLE msg=audit(1774542675.837:4079): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774542675.837:4079): arch=c000003e syscall=234 success=no exit=-13 a0=5777 a1=577c a2=6 a3=8 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774542675.837:4079): avc:  denied  { signal } for  pid=22391 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"