----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3690): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3690): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55d955e8fc5d a2=0 a3=0 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3690): avc:  denied  { search } for  pid=20492 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3691): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3691): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55d955e8fc5d a2=0 a3=0 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3691): avc:  denied  { search } for  pid=20492 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3692): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3692): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7fe74a9ba5e9 a2=7fe749d4b640 a3=0 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3692): avc:  denied  { search } for  pid=20492 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3693): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3693): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe74a9ba5e9 a2=80000 a3=0 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3693): avc:  denied  { search } for  pid=20492 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3694): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3694): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55d955e99b81 a2=0 a3=0 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3694): avc:  denied  { search } for  pid=20492 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3695): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3695): arch=c000003e syscall=0 success=no exit=-13 a0=7d a1=7fe749d49945 a2=1 a3=7fe74a691204 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3695): avc:  denied  { read } for  pid=20492 comm="Wt-8" path="pipe:[80752]" dev="pipefs" ino=80752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3696): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3696): arch=c000003e syscall=1 success=no exit=-13 a0=85 a1=7fe749d49000 a2=1 a3=0 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3696): avc:  denied  { write } for  pid=20492 comm="Wt-8" path="pipe:[80753]" dev="pipefs" ino=80753 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3697): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3697): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe7474302c0 a2=0 a3=0 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3697): avc:  denied  { search } for  pid=20492 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3698): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3698): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe747430040 a2=0 a3=0 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3698): avc:  denied  { search } for  pid=20492 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3699): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3699): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe747418ea0 a2=0 a3=0 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3699): avc:  denied  { search } for  pid=20492 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3700): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3700): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe7474185a0 a2=0 a3=0 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3700): avc:  denied  { search } for  pid=20492 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3701): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3701): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe747418a50 a2=0 a3=0 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3701): avc:  denied  { search } for  pid=20492 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3702): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3702): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe747418420 a2=0 a3=0 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3702): avc:  denied  { search } for  pid=20492 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3703): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3703): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=55d9560c9850 a2=345 a3=7fe74a9b1c20 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3703): avc:  denied  { use } for  pid=20492 comm="Wt-8" path="socket:[61532]" dev="sockfs" ino=61532 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3704): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3704): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe749d4a750 a2=241 a3=1b6 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3704): avc:  denied  { search } for  pid=20492 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3705): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3705): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55d955e8fc5d a2=0 a3=0 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3705): avc:  denied  { search } for  pid=20492 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3706): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3706): arch=c000003e syscall=62 success=no exit=-13 a0=4fcc a1=a a2=7fe749245de0 a3=0 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3706): avc:  denied  { signal } for  pid=20492 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3707): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3707): arch=c000003e syscall=234 success=no exit=-13 a0=500c a1=5011 a2=6 a3=8 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3707): avc:  denied  { signal } for  pid=20492 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 20 21:56:21 2026
type=PROCTITLE msg=audit(1774058181.465:3708): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774058181.465:3708): arch=c000003e syscall=234 success=no exit=-13 a0=500c a1=5011 a2=6 a3=8 items=0 ppid=20428 pid=20492 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774058181.465:3708): avc:  denied  { signal } for  pid=20492 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"