---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12760): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12760): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=56532fe6cc5d a2=0 a3=0 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12760): avc: denied { search } for pid=73522 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12761): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12761): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=56532fe6cc5d a2=0 a3=0 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12761): avc: denied { search } for pid=73522 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12762): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12762): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f434d1ba5e9 a2=7f434c5cc640 a3=0 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12762): avc: denied { search } for pid=73522 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12763): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12763): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f434d1ba5e9 a2=80000 a3=0 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12763): avc: denied { search } for pid=73522 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12764): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12764): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=56532fe76b81 a2=0 a3=0 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12764): avc: denied { search } for pid=73522 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12765): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12765): arch=c000003e syscall=0 success=no exit=-13 a0=43 a1=7f434c5ca945 a2=1 a3=7f434d221204 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12765): avc: denied { read } for pid=73522 comm="Wt-8" path="pipe:[248112]" dev="pipefs" ino=248112 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12766): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12766): arch=c000003e syscall=1 success=no exit=-13 a0=85 a1=7f434c5ca000 a2=1 a3=0 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12766): avc: denied { write } for pid=73522 comm="Wt-8" path="pipe:[248113]" dev="pipefs" ino=248113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12767): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12767): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f4349c302c0 a2=0 a3=0 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12767): avc: denied { search } for pid=73522 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12768): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12768): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f4349c30040 a2=0 a3=0 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12768): avc: denied { search } for pid=73522 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12769): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12769): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f4349c18ea0 a2=0 a3=0 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12769): avc: denied { search } for pid=73522 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12770): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12770): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f4349c18bd0 a2=0 a3=0 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12770): avc: denied { search } for pid=73522 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12771): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12771): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f4349c184b0 a2=0 a3=0 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12771): avc: denied { search } for pid=73522 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12772): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12772): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f4349c18420 a2=0 a3=0 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12772): avc: denied { search } for pid=73522 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12773): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12773): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=5653300a6850 a2=345 a3=7f434d1b1c20 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12773): avc: denied { use } for pid=73522 comm="Wt-8" path="socket:[239881]" dev="sockfs" ino=239881 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12774): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12774): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f434c5cb750 a2=241 a3=1b6 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12774): avc: denied { search } for pid=73522 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12775): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12775): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=56532fe6cc5d a2=0 a3=0 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12775): avc: denied { search } for pid=73522 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12776): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12776): arch=c000003e syscall=62 success=no exit=-13 a0=11e9a a1=a a2=7f434ba45de0 a3=0 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12776): avc: denied { signal } for pid=73522 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12777): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12777): arch=c000003e syscall=234 success=no exit=-13 a0=11f32 a1=11f37 a2=6 a3=8 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12777): avc: denied { signal } for pid=73522 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 27 22:11:38 2026 type=PROCTITLE msg=audit(1774663898.075:12778): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774663898.075:12778): arch=c000003e syscall=234 success=no exit=-13 a0=11f32 a1=11f37 a2=6 a3=8 items=0 ppid=73370 pid=73522 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774663898.075:12778): avc: denied { signal } for pid=73522 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"