----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.089:4060): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.089:4060): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5624efe68c5d a2=0 a3=0 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.089:4060): avc:  denied  { search } for  pid=22388 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.089:4061): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.089:4061): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5624efe68c5d a2=0 a3=0 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.089:4061): avc:  denied  { search } for  pid=22388 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.089:4062): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.089:4062): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7fe1263ba5e9 a2=7fe1257c2640 a3=0 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.089:4062): avc:  denied  { search } for  pid=22388 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.089:4063): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.089:4063): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe1263ba5e9 a2=80000 a3=0 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.089:4063): avc:  denied  { search } for  pid=22388 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.089:4064): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.089:4064): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5624efe72b81 a2=0 a3=0 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.089:4064): avc:  denied  { search } for  pid=22388 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.089:4065): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.089:4065): arch=c000003e syscall=0 success=no exit=-13 a0=44 a1=7fe1257c0945 a2=1 a3=7fe12641a204 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.089:4065): avc:  denied  { read } for  pid=22388 comm="Wt-8" path="pipe:[83676]" dev="pipefs" ino=83676 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.089:4066): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.089:4066): arch=c000003e syscall=1 success=no exit=-13 a0=86 a1=7fe1257c0000 a2=1 a3=0 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.089:4066): avc:  denied  { write } for  pid=22388 comm="Wt-8" path="pipe:[83677]" dev="pipefs" ino=83677 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.089:4067): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.089:4067): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe122e302c0 a2=0 a3=0 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.089:4067): avc:  denied  { search } for  pid=22388 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.089:4068): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.089:4068): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe122e30040 a2=0 a3=0 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.089:4068): avc:  denied  { search } for  pid=22388 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.089:4069): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.089:4069): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe122e18480 a2=0 a3=0 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.089:4069): avc:  denied  { search } for  pid=22388 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.089:4070): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.089:4070): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe122e18a80 a2=0 a3=0 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.089:4070): avc:  denied  { search } for  pid=22388 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.089:4071): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.089:4071): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe122e18ab0 a2=0 a3=0 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.089:4071): avc:  denied  { search } for  pid=22388 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.089:4072): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.089:4072): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe122e18ea0 a2=0 a3=0 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.089:4072): avc:  denied  { search } for  pid=22388 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.089:4073): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.089:4073): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=5624f00a2850 a2=345 a3=7fe1263b1c20 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.089:4073): avc:  denied  { use } for  pid=22388 comm="Wt-8" path="socket:[64082]" dev="sockfs" ino=64082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.089:4074): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.089:4074): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe1257c1750 a2=241 a3=1b6 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.089:4074): avc:  denied  { search } for  pid=22388 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.090:4075): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.090:4075): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5624efe68c5d a2=0 a3=0 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.090:4075): avc:  denied  { search } for  pid=22388 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.090:4076): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.090:4076): arch=c000003e syscall=62 success=no exit=-13 a0=5734 a1=a a2=7fe124c45de0 a3=0 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.090:4076): avc:  denied  { signal } for  pid=22388 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.090:4077): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.090:4077): arch=c000003e syscall=234 success=no exit=-13 a0=5774 a1=5779 a2=6 a3=8 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.090:4077): avc:  denied  { signal } for  pid=22388 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 13:21:46 2026
type=PROCTITLE msg=audit(1774459306.090:4078): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774459306.090:4078): arch=c000003e syscall=234 success=no exit=-13 a0=5774 a1=5779 a2=6 a3=8 items=0 ppid=22324 pid=22388 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774459306.090:4078): avc:  denied  { signal } for  pid=22388 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"