---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.246:13184): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.246:13184): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5615d3c79c5d a2=0 a3=0 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.246:13184): avc: denied { search } for pid=75498 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.246:13185): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.246:13185): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5615d3c79c5d a2=0 a3=0 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.246:13185): avc: denied { search } for pid=75498 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.246:13186): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.246:13186): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f07143ba5e9 a2=7f0713726640 a3=0 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.246:13186): avc: denied { search } for pid=75498 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.246:13187): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.246:13187): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f07143ba5e9 a2=80000 a3=0 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.246:13187): avc: denied { search } for pid=75498 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.246:13188): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.246:13188): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5615d3c83b8d a2=0 a3=0 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.246:13188): avc: denied { search } for pid=75498 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.247:13189): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.247:13189): arch=c000003e syscall=0 success=no exit=-13 a0=43 a1=7f0713724945 a2=1 a3=7f071406a204 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.247:13189): avc: denied { read } for pid=75498 comm="Wt-8" path="pipe:[260396]" dev="pipefs" ino=260396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.247:13190): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.247:13190): arch=c000003e syscall=1 success=no exit=-13 a0=83 a1=7f0713724000 a2=1 a3=0 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.247:13190): avc: denied { write } for pid=75498 comm="Wt-8" path="pipe:[260397]" dev="pipefs" ino=260397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.247:13191): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.247:13191): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0710e302c0 a2=0 a3=0 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.247:13191): avc: denied { search } for pid=75498 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.247:13192): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.247:13192): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0710e30040 a2=0 a3=0 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.247:13192): avc: denied { search } for pid=75498 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.247:13193): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.247:13193): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0710e18420 a2=0 a3=0 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.247:13193): avc: denied { search } for pid=75498 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.247:13194): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.247:13194): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0710e18900 a2=0 a3=0 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.247:13194): avc: denied { search } for pid=75498 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.247:13195): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.247:13195): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0710e18b10 a2=0 a3=0 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.247:13195): avc: denied { search } for pid=75498 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.247:13196): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.247:13196): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0710e18690 a2=0 a3=0 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.247:13196): avc: denied { search } for pid=75498 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.247:13197): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.247:13197): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=5615d3eb3850 a2=345 a3=7f07143b1c20 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.247:13197): avc: denied { use } for pid=75498 comm="Wt-8" path="socket:[241673]" dev="sockfs" ino=241673 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.247:13198): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.247:13198): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0713725750 a2=241 a3=1b6 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.247:13198): avc: denied { search } for pid=75498 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.247:13199): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.247:13199): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5615d3c79c5d a2=0 a3=0 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.247:13199): avc: denied { search } for pid=75498 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.247:13200): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.247:13200): arch=c000003e syscall=62 success=no exit=-13 a0=12653 a1=a a2=7f0712c45de0 a3=0 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.247:13200): avc: denied { signal } for pid=75498 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.247:13201): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.247:13201): arch=c000003e syscall=234 success=no exit=-13 a0=126ea a1=126ef a2=6 a3=8 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.247:13201): avc: denied { signal } for pid=75498 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:01:07 2026 type=PROCTITLE msg=audit(1777395667.247:13202): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395667.247:13202): arch=c000003e syscall=234 success=no exit=-13 a0=126ea a1=126ef a2=6 a3=8 items=0 ppid=75347 pid=75498 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395667.247:13202): avc: denied { signal } for pid=75498 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"