---- time->Thu Mar 26 12:37:47 2026 type=PROCTITLE msg=audit(1774543067.963:12155): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543067.963:12155): arch=c000003e syscall=203 success=no exit=-13 a0=11a40 a1=8 a2=7f236a6d5b40 a3=8 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-752" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543067.963:12155): avc: denied { setsched } for pid=68353 comm="Wt-752" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:47 2026 type=PROCTITLE msg=audit(1774543067.963:12156): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543067.963:12156): arch=c000003e syscall=203 success=no exit=-13 a0=11a40 a1=8 a2=7f236a6d5e60 a3=8 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-820" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543067.963:12156): avc: denied { setsched } for pid=68353 comm="Wt-820" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:47 2026 type=PROCTITLE msg=audit(1774543067.963:12157): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543067.963:12157): arch=c000003e syscall=435 success=no exit=-13 a0=7f23679a7c00 a1=58 a2=7f237068b000 a3=8 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-752" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543067.963:12157): avc: denied { fork } for pid=68353 comm="Wt-752" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:47 2026 type=PROCTITLE msg=audit(1774543067.963:12158): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543067.963:12158): arch=c000003e syscall=435 success=no exit=-13 a0=7f23679a7c00 a1=58 a2=7f237068b000 a3=8 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-752" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543067.963:12158): avc: denied { fork } for pid=68353 comm="Wt-752" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12159): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12159): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=560577f47c5d a2=0 a3=0 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12159): avc: denied { search } for pid=68353 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12160): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12160): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=560577f47c5d a2=0 a3=0 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12160): avc: denied { search } for pid=68353 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12161): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12161): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f23707ba5e9 a2=7f236fb20640 a3=0 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12161): avc: denied { search } for pid=68353 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12162): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12162): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f23707ba5e9 a2=80000 a3=0 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12162): avc: denied { search } for pid=68353 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12163): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12163): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=560577f51b81 a2=0 a3=0 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12163): avc: denied { search } for pid=68353 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12164): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12164): arch=c000003e syscall=0 success=no exit=-13 a0=44 a1=7f236fb1e945 a2=1 a3=7f2370466204 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12164): avc: denied { read } for pid=68353 comm="Wt-8" path="pipe:[237912]" dev="pipefs" ino=237912 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12165): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12165): arch=c000003e syscall=1 success=no exit=-13 a0=86 a1=7f236fb1e000 a2=1 a3=0 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12165): avc: denied { write } for pid=68353 comm="Wt-8" path="pipe:[237913]" dev="pipefs" ino=237913 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12166): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12166): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f236d2302c0 a2=0 a3=0 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12166): avc: denied { search } for pid=68353 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12167): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12167): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f236d230040 a2=0 a3=0 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12167): avc: denied { search } for pid=68353 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12168): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12168): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f236d218ea0 a2=0 a3=0 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12168): avc: denied { search } for pid=68353 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12169): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12169): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f236d218570 a2=0 a3=0 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12169): avc: denied { search } for pid=68353 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12170): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12170): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f236d218480 a2=0 a3=0 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12170): avc: denied { search } for pid=68353 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12171): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12171): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f236d218420 a2=0 a3=0 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12171): avc: denied { search } for pid=68353 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12172): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12172): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=560578181850 a2=345 a3=7f23707b1c20 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12172): avc: denied { use } for pid=68353 comm="Wt-8" path="socket:[218698]" dev="sockfs" ino=218698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12173): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12173): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f236fb1f750 a2=241 a3=1b6 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12173): avc: denied { search } for pid=68353 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12174): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12174): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=560577f47c5d a2=0 a3=0 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12174): avc: denied { search } for pid=68353 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12175): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12175): arch=c000003e syscall=62 success=no exit=-13 a0=10ae6 a1=a a2=7f236f047de0 a3=0 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12175): avc: denied { signal } for pid=68353 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12176): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12176): arch=c000003e syscall=234 success=no exit=-13 a0=10b01 a1=10b06 a2=6 a3=8 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12176): avc: denied { signal } for pid=68353 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Thu Mar 26 12:37:48 2026 type=PROCTITLE msg=audit(1774543068.868:12177): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1774543068.868:12177): arch=c000003e syscall=234 success=no exit=-13 a0=10b01 a1=10b06 a2=6 a3=8 items=0 ppid=68326 pid=68353 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1774543068.868:12177): avc: denied { signal } for pid=68353 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"