---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.140:7169): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.140:7169): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f69303f34c0 a2=7f693027e0c0 a3=0 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="sqlservr" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.140:7169): avc: denied { search } for pid=33237 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.449:7170): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.449:7170): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=564a4341fc5d a2=0 a3=0 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.449:7170): avc: denied { search } for pid=33237 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.449:7171): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.449:7171): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=564a4341fc5d a2=0 a3=0 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.449:7171): avc: denied { search } for pid=33237 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.449:7172): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.449:7172): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f6931bba5e9 a2=7f6931877640 a3=0 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.449:7172): avc: denied { search } for pid=33237 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.449:7173): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.449:7173): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f6931bba5e9 a2=80000 a3=0 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.449:7173): avc: denied { search } for pid=33237 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.449:7174): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.449:7174): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=564a43429b81 a2=0 a3=0 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.449:7174): avc: denied { search } for pid=33237 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.449:7175): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.449:7175): arch=c000003e syscall=0 success=no exit=-13 a0=7e a1=7f6931875945 a2=1 a3=7f6931c62204 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.449:7175): avc: denied { read } for pid=33237 comm="Wt-8" path="pipe:[130527]" dev="pipefs" ino=130527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.449:7176): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.449:7176): arch=c000003e syscall=1 success=no exit=-13 a0=85 a1=7f6931875000 a2=1 a3=0 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.449:7176): avc: denied { write } for pid=33237 comm="Wt-8" path="pipe:[130528]" dev="pipefs" ino=130528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.449:7177): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.449:7177): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f692e6302c0 a2=0 a3=0 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.449:7177): avc: denied { search } for pid=33237 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.449:7178): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.449:7178): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f692e630040 a2=0 a3=0 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.449:7178): avc: denied { search } for pid=33237 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.449:7179): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.449:7179): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f692e618420 a2=0 a3=0 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.449:7179): avc: denied { search } for pid=33237 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.449:7180): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.449:7180): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f692e6189f0 a2=0 a3=0 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.449:7180): avc: denied { search } for pid=33237 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.449:7181): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.449:7181): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f692e618960 a2=0 a3=0 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.449:7181): avc: denied { search } for pid=33237 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.449:7182): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.449:7182): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f692e6185a0 a2=0 a3=0 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.449:7182): avc: denied { search } for pid=33237 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.449:7183): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.449:7183): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=564a43659850 a2=345 a3=7f6931bb1c20 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.449:7183): avc: denied { use } for pid=33237 comm="Wt-8" path="socket:[90259]" dev="sockfs" ino=90259 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.449:7184): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.449:7184): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f6931876750 a2=241 a3=1b6 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.449:7184): avc: denied { search } for pid=33237 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.450:7185): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.450:7185): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=564a4341fc5d a2=0 a3=0 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.450:7185): avc: denied { search } for pid=33237 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.450:7186): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.450:7186): arch=c000003e syscall=62 success=no exit=-13 a0=8195 a1=a a2=7f6930445de0 a3=0 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.450:7186): avc: denied { signal } for pid=33237 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.450:7187): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.450:7187): arch=c000003e syscall=234 success=no exit=-13 a0=81d5 a1=81da a2=6 a3=8 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.450:7187): avc: denied { signal } for pid=33237 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:48:38 2026 type=PROCTITLE msg=audit(1774532918.450:7188): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774532918.450:7188): arch=c000003e syscall=234 success=no exit=-13 a0=81d5 a1=81da a2=6 a3=8 items=0 ppid=33173 pid=33237 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774532918.450:7188): avc: denied { signal } for pid=33237 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"