---- time->Fri Aug 22 21:22:55 2025 type=PROCTITLE msg=audit(1755912175.724:2760): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1755912175.724:2760): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffe794104f0 a2=2d a3=0 items=0 ppid=20053 pid=20054 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1755912175.724:2760): avc: denied { connectto } for pid=20054 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 22 21:22:55 2025 type=PROCTITLE msg=audit(1755912175.724:2761): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1755912175.724:2761): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffe794104e0 a2=2d a3=55ee83f96a00 items=0 ppid=20053 pid=20054 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1755912175.724:2761): avc: denied { connectto } for pid=20054 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 22 21:22:55 2025 type=PROCTITLE msg=audit(1755912175.736:2762): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1755912175.736:2762): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffdaf089710 a2=2d a3=0 items=0 ppid=20057 pid=20058 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1755912175.736:2762): avc: denied { connectto } for pid=20058 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 22 21:22:55 2025 type=PROCTITLE msg=audit(1755912175.736:2763): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1755912175.736:2763): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffdaf089700 a2=2d a3=55567ead9a00 items=0 ppid=20057 pid=20058 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1755912175.736:2763): avc: denied { connectto } for pid=20058 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 22 21:22:55 2025 type=PROCTITLE msg=audit(1755912175.755:2764): proctitle=2F62696E2F7368002D63006966202020686173682064706B673B207468656E20636D643D2264706B67202D2D6C697374223B2020202020202020202020202020202020202020656C69662068617368202072706D3B207468656E20636D643D2272706D202D7161223B20202020202020202020202020202020202020656C7365 type=SYSCALL msg=audit(1755912175.755:2764): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5582c3fa7260 a2=7ffeeb0efc30 a3=0 items=0 ppid=20052 pid=20063 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="sh" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1755912175.755:2764): avc: denied { getattr } for pid=20063 comm="sh" path="/usr/bin/rpm" dev="xvda1" ino=632552 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=0 ---- time->Fri Aug 22 21:22:55 2025 type=PROCTITLE msg=audit(1755912175.783:2767): proctitle=7375002D70002D63002F6F70742F6D7373716C2F62696E2F73716C7365727672202D2D7365747570202D2D72657365742D73612D70617373776F7264006D7373716C type=SYSCALL msg=audit(1755912175.783:2767): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffc5e247c20 a2=2d a3=55d25b603750 items=0 ppid=20066 pid=20072 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="su" exe="/usr/bin/su" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1755912175.783:2767): avc: denied { connectto } for pid=20072 comm="su" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 22 21:22:55 2025 type=PROCTITLE msg=audit(1755912175.783:2769): proctitle=7375002D70002D63002F6F70742F6D7373716C2F62696E2F73716C7365727672202D2D7365747570202D2D72657365742D73612D70617373776F7264006D7373716C type=SYSCALL msg=audit(1755912175.783:2769): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffc5e2477e0 a2=2d a3=55d25b603700 items=0 ppid=20066 pid=20072 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="su" exe="/usr/bin/su" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1755912175.783:2769): avc: denied { connectto } for pid=20072 comm="su" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 22 21:23:01 2025 type=PROCTITLE msg=audit(1755912181.670:2773): proctitle="(sd-askpwagent)" type=SYSCALL msg=audit(1755912181.670:2773): arch=c000003e syscall=59 success=no exit=-13 a0=7f96dd2c4f78 a1=7ffecd1dde60 a2=7ffecd1de6f8 a3=0 items=0 ppid=20271 pid=20272 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="(sd-askpwagent)" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=SELINUX_ERR msg=audit(1755912181.670:2773): op=security_compute_sid invalid_context="unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:systemd_passwd_agent_exec_t:s0 tclass=process ---- time->Fri Aug 22 21:23:33 2025 type=PROCTITLE msg=audit(1755912213.519:3395): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1755912213.519:3395): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffc80b2c290 a2=2d a3=0 items=0 ppid=27046 pid=27047 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1755912213.519:3395): avc: denied { connectto } for pid=27047 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 22 21:23:33 2025 type=PROCTITLE msg=audit(1755912213.519:3396): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1755912213.519:3396): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffc80b2c280 a2=2d a3=55ef5501ba00 items=0 ppid=27046 pid=27047 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1755912213.519:3396): avc: denied { connectto } for pid=27047 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 22 21:23:33 2025 type=PROCTITLE msg=audit(1755912213.528:3397): proctitle=707974686F6E33002F6F70742F6D7373716C2F62696E2F2E2E2F6C69622F6D7373716C2D636F6E662F6D7373716C2D636F6E662E707900736574006E6574776F726B2E746370706F72740031343333 type=SYSCALL msg=audit(1755912213.528:3397): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffd409cb570 a2=10 a3=7fb85a81e9f1 items=0 ppid=27043 pid=27045 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1755912213.528:3397): avc: denied { name_connect } for pid=27045 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=0 ---- time->Fri Aug 22 21:23:55 2025 type=PROCTITLE msg=audit(1755912235.348:3761): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912235.348:3761): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=559284cd44c4 a2=0 a3=0 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912235.348:3761): avc: denied { search } for pid=27380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:55 2025 type=PROCTITLE msg=audit(1755912235.348:3762): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912235.348:3762): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=559284ccb5d9 a2=0 a3=0 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912235.348:3762): avc: denied { search } for pid=27380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:56 2025 type=PROCTITLE msg=audit(1755912236.063:3765): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912236.063:3765): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f41d5bf53a0 a2=7f41d5a7e0c0 a3=0 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="sqlservr" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912236.063:3765): avc: denied { search } for pid=27380 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:56 2025 type=AVC msg=audit(1755912236.088:3766): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:56 2025 type=AVC msg=audit(1755912236.088:3767): avc: denied { sigkill } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:56 2025 type=AVC msg=audit(1755912236.088:3768): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:56 2025 type=AVC msg=audit(1755912236.088:3769): avc: denied { sigkill } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:56 2025 type=AVC msg=audit(1755912236.088:3770): avc: denied { signull } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:56 2025 type=AVC msg=audit(1755912236.088:3771): avc: denied { signull } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:56 2025 type=PROCTITLE msg=audit(1755912236.348:3797): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912236.348:3797): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=559284cd44c4 a2=0 a3=0 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912236.348:3797): avc: denied { search } for pid=27380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:56 2025 type=PROCTITLE msg=audit(1755912236.348:3798): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912236.348:3798): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=559284ccb5d9 a2=0 a3=0 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912236.348:3798): avc: denied { search } for pid=27380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:57 2025 type=PROCTITLE msg=audit(1755912237.087:3800): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912237.087:3800): arch=c000003e syscall=203 success=no exit=-13 a0=7184 a1=8 a2=7f41d5d7e6a8 a3=8 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-556" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912237.087:3800): avc: denied { setsched } for pid=27380 comm="Wt-556" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:57 2025 type=PROCTITLE msg=audit(1755912237.087:3801): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912237.087:3801): arch=c000003e syscall=435 success=no exit=-13 a0=7f41cf725c00 a1=58 a2=7f41d728afd0 a3=8 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-556" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912237.087:3801): avc: denied { fork } for pid=27380 comm="Wt-556" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:57 2025 type=PROCTITLE msg=audit(1755912237.088:3802): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912237.088:3802): arch=c000003e syscall=435 success=no exit=-13 a0=7f41cf725c00 a1=58 a2=7f41d728afd0 a3=8 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-556" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912237.088:3802): avc: denied { fork } for pid=27380 comm="Wt-556" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:57 2025 type=PROCTITLE msg=audit(1755912237.088:3803): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912237.088:3803): arch=c000003e syscall=203 success=no exit=-13 a0=7184 a1=8 a2=7f41d22d4f40 a3=8 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-788" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912237.088:3803): avc: denied { setsched } for pid=27380 comm="Wt-788" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:57 2025 type=PROCTITLE msg=audit(1755912237.088:3804): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912237.088:3804): arch=c000003e syscall=435 success=no exit=-13 a0=7f41ce502c00 a1=58 a2=7f41d728afd0 a3=8 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-768" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912237.088:3804): avc: denied { fork } for pid=27380 comm="Wt-768" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:57 2025 type=PROCTITLE msg=audit(1755912237.088:3805): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912237.088:3805): arch=c000003e syscall=435 success=no exit=-13 a0=7f41ce502c00 a1=58 a2=7f41d728afd0 a3=8 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-768" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912237.088:3805): avc: denied { fork } for pid=27380 comm="Wt-768" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:57 2025 type=PROCTITLE msg=audit(1755912237.088:3806): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912237.088:3806): arch=c000003e syscall=209 success=no exit=-13 a0=7f41d6686000 a1=1 a2=7f41ce4e1c98 a3=10 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-772" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912237.088:3806): avc: denied { read } for pid=27380 comm="Wt-772" path="/var/opt/mssql/data/model_msdbdata.mdf" dev="xvda1" ino=322961623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:57 2025 type=PROCTITLE msg=audit(1755912237.089:3807): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912237.089:3807): arch=c000003e syscall=209 success=no exit=-13 a0=7f41d6686000 a1=1 a2=7f41ce4e1c98 a3=e95810000 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-772" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912237.089:3807): avc: denied { read } for pid=27380 comm="Wt-772" path="/var/opt/mssql/data/model_msdbdata.mdf" dev="xvda1" ino=322961623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:57 2025 type=PROCTITLE msg=audit(1755912237.339:3809): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912237.339:3809): arch=c000003e syscall=209 success=no exit=-13 a0=7f41d6686000 a1=1 a2=7f41ce4e1c98 a3=e95810000 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-772" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912237.339:3809): avc: denied { read } for pid=27380 comm="Wt-772" path="/var/opt/mssql/data/model_msdbdata.mdf" dev="xvda1" ino=322961623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:57 2025 type=PROCTITLE msg=audit(1755912237.348:3810): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912237.348:3810): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=559284cd44c4 a2=0 a3=0 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912237.348:3810): avc: denied { search } for pid=27380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:57 2025 type=PROCTITLE msg=audit(1755912237.348:3811): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912237.348:3811): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=559284ccb5d9 a2=0 a3=0 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912237.348:3811): avc: denied { search } for pid=27380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:57 2025 type=PROCTITLE msg=audit(1755912237.839:3830): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912237.839:3830): arch=c000003e syscall=209 success=no exit=-13 a0=7f41d6686000 a1=1 a2=7f41ce4e1c98 a3=e95810000 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-772" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912237.839:3830): avc: denied { read } for pid=27380 comm="Wt-772" path="/var/opt/mssql/data/model_msdbdata.mdf" dev="xvda1" ino=322961623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:58 2025 type=PROCTITLE msg=audit(1755912238.063:3859): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912238.063:3859): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f41d5bf53a0 a2=7f41d5a7e0c0 a3=0 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="sqlservr" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912238.063:3859): avc: denied { search } for pid=27380 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:58 2025 type=PROCTITLE msg=audit(1755912238.348:3877): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912238.348:3877): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=559284cd44c4 a2=0 a3=0 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912238.348:3877): avc: denied { search } for pid=27380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:58 2025 type=PROCTITLE msg=audit(1755912238.348:3878): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912238.348:3878): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=559284ccb5d9 a2=0 a3=0 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912238.348:3878): avc: denied { search } for pid=27380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:58 2025 type=PROCTITLE msg=audit(1755912238.590:3897): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912238.590:3897): arch=c000003e syscall=209 success=no exit=-13 a0=7f41d6686000 a1=1 a2=7f41ce4e1c98 a3=e95810000 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-772" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912238.590:3897): avc: denied { read } for pid=27380 comm="Wt-772" path=2F7661722F6F70742F6D7373716C2F646174612F6D6F64656C5F6D736462646174612E6D6466202864656C6574656429 dev="xvda1" ino=322961623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:58 2025 type=PROCTITLE msg=audit(1755912238.590:3898): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912238.590:3898): arch=c000003e syscall=209 success=no exit=-13 a0=7f41d6686000 a1=1 a2=7f41ce4e1c98 a3=e95810000 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-772" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912238.590:3898): avc: denied { read } for pid=27380 comm="Wt-772" path=2F7661722F6F70742F6D7373716C2F646174612F6D6F64656C5F6D736462646174612E6D6466202864656C6574656429 dev="xvda1" ino=322961623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:58 2025 type=PROCTITLE msg=audit(1755912238.590:3899): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912238.590:3899): arch=c000003e syscall=209 success=no exit=-13 a0=7f41d6686000 a1=1 a2=7f41ce4e1c98 a3=e95810000 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-772" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912238.590:3899): avc: denied { read } for pid=27380 comm="Wt-772" path=2F7661722F6F70742F6D7373716C2F646174612F6D6F64656C5F6D736462646174612E6D6466202864656C6574656429 dev="xvda1" ino=322961623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:58 2025 type=PROCTITLE msg=audit(1755912238.840:3930): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912238.840:3930): arch=c000003e syscall=209 success=no exit=-13 a0=7f41d6686000 a1=1 a2=7f41ce4e1c98 a3=e95810000 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-772" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912238.840:3930): avc: denied { read } for pid=27380 comm="Wt-772" path=2F7661722F6F70742F6D7373716C2F646174612F6D6F64656C5F6D736462646174612E6D6466202864656C6574656429 dev="xvda1" ino=322961623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:59 2025 type=PROCTITLE msg=audit(1755912239.341:3951): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912239.341:3951): arch=c000003e syscall=209 success=no exit=-13 a0=7f41d6686000 a1=1 a2=7f41ce4e1c98 a3=e95810000 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-772" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912239.341:3951): avc: denied { read } for pid=27380 comm="Wt-772" path=2F7661722F6F70742F6D7373716C2F646174612F6D6F64656C5F6D736462646174612E6D6466202864656C6574656429 dev="xvda1" ino=322961623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:59 2025 type=PROCTITLE msg=audit(1755912239.348:3952): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912239.348:3952): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=559284cd44c4 a2=0 a3=0 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912239.348:3952): avc: denied { search } for pid=27380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:59 2025 type=PROCTITLE msg=audit(1755912239.348:3953): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912239.348:3953): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=559284ccb5d9 a2=0 a3=0 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912239.348:3953): avc: denied { search } for pid=27380 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:59 2025 type=PROCTITLE msg=audit(1755912239.662:3974): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912239.662:3974): arch=c000003e syscall=435 success=no exit=-13 a0=7f41cf8d2c00 a1=58 a2=7f41d728afd0 a3=8 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-504" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912239.662:3974): avc: denied { fork } for pid=27380 comm="Wt-504" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:59 2025 type=PROCTITLE msg=audit(1755912239.662:3975): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1755912239.662:3975): arch=c000003e syscall=435 success=no exit=-13 a0=7f41cf8d2c00 a1=58 a2=7f41d728afd0 a3=8 items=0 ppid=27353 pid=27380 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-504" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1755912239.662:3975): avc: denied { fork } for pid=27380 comm="Wt-504" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:23:59 2025 type=AVC msg=audit(1755912239.925:3996): avc: denied { signal } for pid=27353 comm="sqlservr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"