---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.540:12744): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.540:12744): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5629fa80ac5d a2=0 a3=0 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.540:12744): avc: denied { search } for pid=73335 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.540:12745): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.540:12745): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5629fa80ac5d a2=0 a3=0 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.540:12745): avc: denied { search } for pid=73335 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.540:12746): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.540:12746): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f64703ba5e9 a2=7f646f8fb640 a3=0 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.540:12746): avc: denied { search } for pid=73335 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.540:12747): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.540:12747): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f64703ba5e9 a2=80000 a3=0 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.540:12747): avc: denied { search } for pid=73335 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.540:12748): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.540:12748): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5629fa814b81 a2=0 a3=0 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.540:12748): avc: denied { search } for pid=73335 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.541:12749): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.541:12749): arch=c000003e syscall=0 success=no exit=-13 a0=45 a1=7f646f8f9945 a2=1 a3=7f6470447204 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.541:12749): avc: denied { read } for pid=73335 comm="Wt-8" path="pipe:[249981]" dev="pipefs" ino=249981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.541:12750): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.541:12750): arch=c000003e syscall=1 success=no exit=-13 a0=86 a1=7f646f8f9000 a2=1 a3=0 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.541:12750): avc: denied { write } for pid=73335 comm="Wt-8" path="pipe:[249982]" dev="pipefs" ino=249982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.541:12751): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.541:12751): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f646d0302c0 a2=0 a3=0 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.541:12751): avc: denied { search } for pid=73335 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.541:12752): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.541:12752): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f646d030040 a2=0 a3=0 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.541:12752): avc: denied { search } for pid=73335 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.541:12753): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.541:12753): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f646d0189c0 a2=0 a3=0 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.541:12753): avc: denied { search } for pid=73335 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.541:12754): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.541:12754): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f646d0184e0 a2=0 a3=0 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.541:12754): avc: denied { search } for pid=73335 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.541:12755): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.541:12755): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f646d018a20 a2=0 a3=0 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.541:12755): avc: denied { search } for pid=73335 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.541:12756): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.541:12756): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f646d018ea0 a2=0 a3=0 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.541:12756): avc: denied { search } for pid=73335 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.541:12757): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.541:12757): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=5629faa44850 a2=345 a3=7f64703b1c20 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.541:12757): avc: denied { use } for pid=73335 comm="Wt-8" path="socket:[237345]" dev="sockfs" ino=237345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.541:12758): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.541:12758): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f646f8fa750 a2=241 a3=1b6 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.541:12758): avc: denied { search } for pid=73335 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.541:12759): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.541:12759): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5629fa80ac5d a2=0 a3=0 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.541:12759): avc: denied { search } for pid=73335 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.541:12760): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.541:12760): arch=c000003e syscall=62 success=no exit=-13 a0=11df2 a1=a a2=7f646ee45de0 a3=0 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.541:12760): avc: denied { signal } for pid=73335 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.541:12761): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.541:12761): arch=c000003e syscall=234 success=no exit=-13 a0=11e77 a1=11e80 a2=6 a3=8 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.541:12761): avc: denied { signal } for pid=73335 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 09:52:51 2026 type=PROCTITLE msg=audit(1774533171.541:12762): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774533171.541:12762): arch=c000003e syscall=234 success=no exit=-13 a0=11e77 a1=11e80 a2=6 a3=8 items=0 ppid=73202 pid=73335 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774533171.541:12762): avc: denied { signal } for pid=73335 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"