---- time->Fri Mar 13 22:00:12 2026 type=PROCTITLE msg=audit(1773453612.745:6455): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453612.745:6455): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7ff9537cef40 a2=7ff95327e0c0 a3=0 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="sqlservr" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453612.745:6455): avc: denied { search } for pid=30494 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6456): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6456): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=562bb5a24c5d a2=0 a3=0 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6456): avc: denied { search } for pid=30494 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6457): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6457): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=562bb5a24c5d a2=0 a3=0 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6457): avc: denied { search } for pid=30494 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6458): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6458): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7ff954bba5e9 a2=7ff953f2b640 a3=0 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6458): avc: denied { search } for pid=30494 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6459): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6459): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff954bba5e9 a2=80000 a3=0 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6459): avc: denied { search } for pid=30494 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6460): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6460): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=562bb5a2eb81 a2=0 a3=0 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6460): avc: denied { search } for pid=30494 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6461): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6461): arch=c000003e syscall=0 success=no exit=-13 a0=43 a1=7ff953f29945 a2=1 a3=7ff954870204 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6461): avc: denied { read } for pid=30494 comm="Wt-8" path="pipe:[121767]" dev="pipefs" ino=121767 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6462): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6462): arch=c000003e syscall=1 success=no exit=-13 a0=85 a1=7ff953f29000 a2=1 a3=0 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6462): avc: denied { write } for pid=30494 comm="Wt-8" path="pipe:[121768]" dev="pipefs" ino=121768 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6463): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6463): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff9516302c0 a2=0 a3=0 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6463): avc: denied { search } for pid=30494 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6464): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6464): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff951630040 a2=0 a3=0 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6464): avc: denied { search } for pid=30494 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6465): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6465): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff951618ea0 a2=0 a3=0 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6465): avc: denied { search } for pid=30494 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6466): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6466): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff951618930 a2=0 a3=0 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6466): avc: denied { search } for pid=30494 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6467): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6467): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff951618b40 a2=0 a3=0 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6467): avc: denied { search } for pid=30494 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6468): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6468): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff951618420 a2=0 a3=0 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6468): avc: denied { search } for pid=30494 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6469): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6469): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=562bb5c5e850 a2=345 a3=7ff954bb1c20 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6469): avc: denied { use } for pid=30494 comm="Wt-8" path="socket:[83459]" dev="sockfs" ino=83459 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6470): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6470): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff953f2a750 a2=241 a3=1b6 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6470): avc: denied { search } for pid=30494 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6471): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6471): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=562bb5a24c5d a2=0 a3=0 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6471): avc: denied { search } for pid=30494 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6472): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6472): arch=c000003e syscall=62 success=no exit=-13 a0=76de a1=a a2=7ff953445de0 a3=0 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6472): avc: denied { signal } for pid=30494 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6473): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6473): arch=c000003e syscall=234 success=no exit=-13 a0=771e a1=7723 a2=6 a3=8 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6473): avc: denied { signal } for pid=30494 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Mar 13 22:00:13 2026 type=PROCTITLE msg=audit(1773453613.052:6474): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1773453613.052:6474): arch=c000003e syscall=234 success=no exit=-13 a0=771e a1=7723 a2=6 a3=8 items=0 ppid=30430 pid=30494 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1773453613.052:6474): avc: denied { signal } for pid=30494 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"