----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.096:4060): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.096:4060): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7fab907cef40 a2=7fab9027e0c0 a3=0 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="sqlservr" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.096:4060): avc:  denied  { search } for  pid=22380 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4061): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4061): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=555e7e69ac5d a2=0 a3=0 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4061): avc:  denied  { search } for  pid=22380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4062): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4062): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=555e7e69ac5d a2=0 a3=0 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4062): avc:  denied  { search } for  pid=22380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4063): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4063): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7fab91bba5e9 a2=7fab90fe0640 a3=0 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4063): avc:  denied  { search } for  pid=22380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4064): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4064): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fab91bba5e9 a2=80000 a3=0 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4064): avc:  denied  { search } for  pid=22380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4065): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4065): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=555e7e6a4b81 a2=0 a3=0 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4065): avc:  denied  { search } for  pid=22380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4066): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4066): arch=c000003e syscall=0 success=no exit=-13 a0=43 a1=7fab90fde945 a2=1 a3=7fab9191b204 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4066): avc:  denied  { read } for  pid=22380 comm="Wt-8" path="pipe:[84881]" dev="pipefs" ino=84881 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4067): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4067): arch=c000003e syscall=1 success=no exit=-13 a0=85 a1=7fab90fde000 a2=1 a3=0 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4067): avc:  denied  { write } for  pid=22380 comm="Wt-8" path="pipe:[84882]" dev="pipefs" ino=84882 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4068): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4068): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fab8e6302c0 a2=0 a3=0 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4068): avc:  denied  { search } for  pid=22380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4069): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4069): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fab8e630040 a2=0 a3=0 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4069): avc:  denied  { search } for  pid=22380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4070): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4070): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fab8e618ea0 a2=0 a3=0 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4070): avc:  denied  { search } for  pid=22380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4071): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4071): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fab8e618ba0 a2=0 a3=0 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4071): avc:  denied  { search } for  pid=22380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4072): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4072): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fab8e6187b0 a2=0 a3=0 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4072): avc:  denied  { search } for  pid=22380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4073): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4073): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fab8e618420 a2=0 a3=0 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4073): avc:  denied  { search } for  pid=22380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4074): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4074): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=555e7e8d4850 a2=345 a3=7fab91bb1c20 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4074): avc:  denied  { use } for  pid=22380 comm="Wt-8" path="socket:[64159]" dev="sockfs" ino=64159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4075): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4075): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fab90fdf750 a2=241 a3=1b6 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4075): avc:  denied  { search } for  pid=22380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4076): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4076): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=555e7e69ac5d a2=0 a3=0 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4076): avc:  denied  { search } for  pid=22380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4077): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4077): arch=c000003e syscall=62 success=no exit=-13 a0=572c a1=a a2=7fab90445de0 a3=0 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4077): avc:  denied  { signal } for  pid=22380 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4078): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4078): arch=c000003e syscall=234 success=no exit=-13 a0=576c a1=5771 a2=6 a3=8 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4078): avc:  denied  { signal } for  pid=22380 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Thu Mar 19 17:45:24 2026
type=PROCTITLE msg=audit(1773956724.401:4079): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1773956724.401:4079): arch=c000003e syscall=234 success=no exit=-13 a0=576c a1=5771 a2=6 a3=8 items=0 ppid=22316 pid=22380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1773956724.401:4079): avc:  denied  { signal } for  pid=22380 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"