---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4062): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4062): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55c08bfe4c5d a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4062): avc: denied { search } for pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4063): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4063): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55c08bfe4c5d a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4063): avc: denied { search } for pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4064): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4064): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f10a89ba5e9 a2=7f10a7d80640 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4064): avc: denied { search } for pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4065): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4065): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f10a89ba5e9 a2=80000 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4065): avc: denied { search } for pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4066): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4066): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55c08bfeeb81 a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4066): avc: denied { search } for pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4067): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4067): arch=c000003e syscall=0 success=no exit=-13 a0=45 a1=7f10a7d7e945 a2=1 a3=7f10a86c4204 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4067): avc: denied { read } for pid=22391 comm="Wt-8" path="pipe:[87042]" dev="pipefs" ino=87042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4068): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4068): arch=c000003e syscall=1 success=no exit=-13 a0=86 a1=7f10a7d7e000 a2=1 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4068): avc: denied { write } for pid=22391 comm="Wt-8" path="pipe:[87043]" dev="pipefs" ino=87043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4069): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4069): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f10a54302c0 a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4069): avc: denied { search } for pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4070): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4070): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f10a5430040 a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4070): avc: denied { search } for pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4071): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4071): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f10a5418a20 a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4071): avc: denied { search } for pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4072): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4072): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f10a54189c0 a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4072): avc: denied { search } for pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4073): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4073): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f10a54187e0 a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4073): avc: denied { search } for pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4074): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4074): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f10a5418ea0 a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4074): avc: denied { search } for pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4075): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4075): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=55c08c21e850 a2=345 a3=7f10a89b1c20 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4075): avc: denied { use } for pid=22391 comm="Wt-8" path="socket:[64816]" dev="sockfs" ino=64816 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4076): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4076): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f10a7d7f750 a2=241 a3=1b6 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4076): avc: denied { search } for pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4077): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4077): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55c08bfe4c5d a2=0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4077): avc: denied { search } for pid=22391 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4078): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4078): arch=c000003e syscall=62 success=no exit=-13 a0=5737 a1=a a2=7f10a7245de0 a3=0 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4078): avc: denied { signal } for pid=22391 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4079): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4079): arch=c000003e syscall=234 success=no exit=-13 a0=5777 a1=577c a2=6 a3=8 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4079): avc: denied { signal } for pid=22391 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:58:56 2026 type=PROCTITLE msg=audit(1774544336.032:4080): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774544336.032:4080): arch=c000003e syscall=234 success=no exit=-13 a0=5777 a1=577c a2=6 a3=8 items=0 ppid=22327 pid=22391 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774544336.032:4080): avc: denied { signal } for pid=22391 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"