----
time->Wed Mar 25 14:48:38 2026
type=PROCTITLE msg=audit(1774464518.721:4077): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464518.721:4077): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f36577f3460 a2=7f365767e0c0 a3=0 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="sqlservr" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464518.721:4077): avc:  denied  { search } for  pid=22393 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4078): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4078): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=56502f7f6c5d a2=0 a3=0 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4078): avc:  denied  { search } for  pid=22393 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4079): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4079): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=56502f7f6c5d a2=0 a3=0 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4079): avc:  denied  { search } for  pid=22393 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4080): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4080): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f3658dba5e9 a2=7f36582b7640 a3=0 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4080): avc:  denied  { search } for  pid=22393 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4081): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4081): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3658dba5e9 a2=80000 a3=0 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4081): avc:  denied  { search } for  pid=22393 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4082): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4082): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=56502f800b81 a2=0 a3=0 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4082): avc:  denied  { search } for  pid=22393 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4083): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4083): arch=c000003e syscall=0 success=no exit=-13 a0=44 a1=7f36582b5945 a2=1 a3=7f36583f1204 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4083): avc:  denied  { read } for  pid=22393 comm="Wt-8" path="pipe:[86140]" dev="pipefs" ino=86140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4084): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4084): arch=c000003e syscall=1 success=no exit=-13 a0=86 a1=7f36582b5000 a2=1 a3=0 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4084): avc:  denied  { write } for  pid=22393 comm="Wt-8" path="pipe:[86141]" dev="pipefs" ino=86141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4085): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4085): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3655a302c0 a2=0 a3=0 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4085): avc:  denied  { search } for  pid=22393 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4086): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4086): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3655a30040 a2=0 a3=0 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4086): avc:  denied  { search } for  pid=22393 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4087): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4087): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3655a18ea0 a2=0 a3=0 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4087): avc:  denied  { search } for  pid=22393 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4088): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4088): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3655a18480 a2=0 a3=0 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4088): avc:  denied  { search } for  pid=22393 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4089): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4089): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3655a18b70 a2=0 a3=0 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4089): avc:  denied  { search } for  pid=22393 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4090): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4090): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f3655a18420 a2=0 a3=0 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4090): avc:  denied  { search } for  pid=22393 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4091): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4091): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=56502fa30850 a2=345 a3=7f3658db1c20 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4091): avc:  denied  { use } for  pid=22393 comm="Wt-8" path="socket:[65109]" dev="sockfs" ino=65109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4092): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4092): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f36582b6750 a2=241 a3=1b6 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4092): avc:  denied  { search } for  pid=22393 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4093): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4093): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=56502f7f6c5d a2=0 a3=0 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4093): avc:  denied  { search } for  pid=22393 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4094): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4094): arch=c000003e syscall=62 success=no exit=-13 a0=5739 a1=a a2=7f3657845de0 a3=0 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4094): avc:  denied  { signal } for  pid=22393 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4095): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4095): arch=c000003e syscall=234 success=no exit=-13 a0=5779 a1=577e a2=6 a3=8 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4095): avc:  denied  { signal } for  pid=22393 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Wed Mar 25 14:48:39 2026
type=PROCTITLE msg=audit(1774464519.020:4096): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774464519.020:4096): arch=c000003e syscall=234 success=no exit=-13 a0=5779 a1=577e a2=6 a3=8 items=0 ppid=22329 pid=22393 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774464519.020:4096): avc:  denied  { signal } for  pid=22393 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"