---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.439:4449): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.439:4449): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55a186f25c5d a2=0 a3=0 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.439:4449): avc: denied { search } for pid=23855 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.439:4450): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.439:4450): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55a186f25c5d a2=0 a3=0 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.439:4450): avc: denied { search } for pid=23855 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.439:4451): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.439:4451): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f35f47ba5e9 a2=7f35f3b31640 a3=0 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.439:4451): avc: denied { search } for pid=23855 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.439:4452): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.439:4452): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f35f47ba5e9 a2=80000 a3=0 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.439:4452): avc: denied { search } for pid=23855 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.439:4453): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.439:4453): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55a186f2fb8d a2=0 a3=0 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.439:4453): avc: denied { search } for pid=23855 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.440:4454): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.440:4454): arch=c000003e syscall=0 success=no exit=-13 a0=43 a1=7f35f3b2f945 a2=1 a3=7f35f4473204 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.440:4454): avc: denied { read } for pid=23855 comm="Wt-8" path="pipe:[91191]" dev="pipefs" ino=91191 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.440:4455): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.440:4455): arch=c000003e syscall=1 success=no exit=-13 a0=85 a1=7f35f3b2f000 a2=1 a3=0 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.440:4455): avc: denied { write } for pid=23855 comm="Wt-8" path="pipe:[91192]" dev="pipefs" ino=91192 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.440:4456): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.440:4456): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f35f12302c0 a2=0 a3=0 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.440:4456): avc: denied { search } for pid=23855 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.440:4457): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.440:4457): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f35f1230040 a2=0 a3=0 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.440:4457): avc: denied { search } for pid=23855 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.440:4458): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.440:4458): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f35f1218720 a2=0 a3=0 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.440:4458): avc: denied { search } for pid=23855 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.440:4459): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.440:4459): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f35f1218810 a2=0 a3=0 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.440:4459): avc: denied { search } for pid=23855 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.440:4460): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.440:4460): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f35f1218b40 a2=0 a3=0 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.440:4460): avc: denied { search } for pid=23855 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.440:4461): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.440:4461): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f35f1218ea0 a2=0 a3=0 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.440:4461): avc: denied { search } for pid=23855 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.440:4462): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.440:4462): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=55a18715f850 a2=345 a3=7f35f47b1c20 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.440:4462): avc: denied { use } for pid=23855 comm="Wt-8" path="socket:[66287]" dev="sockfs" ino=66287 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.440:4463): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.440:4463): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f35f3b30750 a2=241 a3=1b6 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.440:4463): avc: denied { search } for pid=23855 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.440:4464): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.440:4464): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55a186f25c5d a2=0 a3=0 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.440:4464): avc: denied { search } for pid=23855 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.440:4465): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.440:4465): arch=c000003e syscall=62 success=no exit=-13 a0=5cf1 a1=a a2=7f35f3045de0 a3=0 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.440:4465): avc: denied { signal } for pid=23855 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.440:4466): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.440:4466): arch=c000003e syscall=234 success=no exit=-13 a0=5d2f a1=5d34 a2=6 a3=8 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.440:4466): avc: denied { signal } for pid=23855 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Apr 28 12:54:25 2026 type=PROCTITLE msg=audit(1777395265.440:4467): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1777395265.440:4467): arch=c000003e syscall=234 success=no exit=-13 a0=5d2f a1=5d34 a2=6 a3=8 items=0 ppid=23793 pid=23855 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1777395265.440:4467): avc: denied { signal } for pid=23855 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"