---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.231:17436): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.231:17436): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55c5c9b7fc5d a2=0 a3=0 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.231:17436): avc: denied { search } for pid=95687 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.231:17437): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.231:17437): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55c5c9b7fc5d a2=0 a3=0 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.231:17437): avc: denied { search } for pid=95687 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.231:17438): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.231:17438): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f903abba5e9 a2=7f9039f26640 a3=0 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.231:17438): avc: denied { search } for pid=95687 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.231:17439): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.231:17439): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f903abba5e9 a2=80000 a3=0 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.231:17439): avc: denied { search } for pid=95687 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.231:17440): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.231:17440): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55c5c9b89b8d a2=0 a3=0 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.231:17440): avc: denied { search } for pid=95687 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.231:17441): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.231:17441): arch=c000003e syscall=0 success=no exit=-13 a0=45 a1=7f9039f24945 a2=1 a3=7f903a86a204 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.231:17441): avc: denied { read } for pid=95687 comm="Wt-8" path="pipe:[360111]" dev="pipefs" ino=360111 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.231:17442): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.231:17442): arch=c000003e syscall=1 success=no exit=-13 a0=86 a1=7f9039f24000 a2=1 a3=0 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.231:17442): avc: denied { write } for pid=95687 comm="Wt-8" path="pipe:[360112]" dev="pipefs" ino=360112 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.231:17443): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.231:17443): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f90376302c0 a2=0 a3=0 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.231:17443): avc: denied { search } for pid=95687 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.231:17444): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.231:17444): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f9037630040 a2=0 a3=0 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.231:17444): avc: denied { search } for pid=95687 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.231:17445): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.231:17445): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f90376187e0 a2=0 a3=0 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.231:17445): avc: denied { search } for pid=95687 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.232:17446): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.232:17446): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f9037618510 a2=0 a3=0 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.232:17446): avc: denied { search } for pid=95687 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.232:17447): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.232:17447): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f90376189c0 a2=0 a3=0 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.232:17447): avc: denied { search } for pid=95687 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.232:17448): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.232:17448): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f9037618ea0 a2=0 a3=0 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.232:17448): avc: denied { search } for pid=95687 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.232:17449): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.232:17449): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=55c5c9db9850 a2=345 a3=7f903abb1c20 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.232:17449): avc: denied { use } for pid=95687 comm="Wt-8" path="socket:[341740]" dev="sockfs" ino=341740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.232:17450): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.232:17450): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f9039f25750 a2=241 a3=1b6 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.232:17450): avc: denied { search } for pid=95687 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.232:17451): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.232:17451): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55c5c9b7fc5d a2=0 a3=0 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.232:17451): avc: denied { search } for pid=95687 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.232:17452): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.232:17452): arch=c000003e syscall=62 success=no exit=-13 a0=1752f a1=a a2=7f9039447de0 a3=0 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.232:17452): avc: denied { signal } for pid=95687 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.232:17453): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.232:17453): arch=c000003e syscall=234 success=no exit=-13 a0=175c7 a1=175cc a2=6 a3=8 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.232:17453): avc: denied { signal } for pid=95687 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 13:02:29 2026 type=PROCTITLE msg=audit(1777395749.232:17454): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395749.232:17454): arch=c000003e syscall=234 success=no exit=-13 a0=175c7 a1=175cc a2=6 a3=8 items=0 ppid=95535 pid=95687 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395749.232:17454): avc: denied { signal } for pid=95687 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"