----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4090): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4090): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563d16779c5d a2=0 a3=0 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4090): avc:  denied  { search } for  pid=22547 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4091): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4091): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563d16779c5d a2=0 a3=0 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4091): avc:  denied  { search } for  pid=22547 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4092): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4092): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7fb0c6fba5e9 a2=7fb0c6505640 a3=0 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4092): avc:  denied  { search } for  pid=22547 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4093): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4093): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fb0c6fba5e9 a2=80000 a3=0 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4093): avc:  denied  { search } for  pid=22547 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4094): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4094): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563d16783b81 a2=0 a3=0 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4094): avc:  denied  { search } for  pid=22547 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4095): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4095): arch=c000003e syscall=0 success=no exit=-13 a0=44 a1=7fb0c6503945 a2=1 a3=7fb0c7055204 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4095): avc:  denied  { read } for  pid=22547 comm="Wt-8" path="pipe:[86524]" dev="pipefs" ino=86524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4096): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4096): arch=c000003e syscall=1 success=no exit=-13 a0=86 a1=7fb0c6503000 a2=1 a3=0 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4096): avc:  denied  { write } for  pid=22547 comm="Wt-8" path="pipe:[86525]" dev="pipefs" ino=86525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4097): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4097): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fb0c3c302c0 a2=0 a3=0 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4097): avc:  denied  { search } for  pid=22547 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4098): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4098): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fb0c3c30040 a2=0 a3=0 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4098): avc:  denied  { search } for  pid=22547 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4099): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4099): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fb0c3c18420 a2=0 a3=0 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4099): avc:  denied  { search } for  pid=22547 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4100): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4100): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fb0c3c189c0 a2=0 a3=0 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4100): avc:  denied  { search } for  pid=22547 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4101): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4101): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fb0c3c18a50 a2=0 a3=0 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4101): avc:  denied  { search } for  pid=22547 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4102): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4102): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fb0c3c18c60 a2=0 a3=0 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4102): avc:  denied  { search } for  pid=22547 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4103): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4103): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=563d169b3850 a2=345 a3=7fb0c6fb1c20 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4103): avc:  denied  { use } for  pid=22547 comm="Wt-8" path="socket:[64306]" dev="sockfs" ino=64306 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4104): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4104): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fb0c6504750 a2=241 a3=1b6 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4104): avc:  denied  { search } for  pid=22547 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4105): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4105): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563d16779c5d a2=0 a3=0 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4105): avc:  denied  { search } for  pid=22547 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4106): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4106): arch=c000003e syscall=62 success=no exit=-13 a0=57d3 a1=a a2=7fb0c5a45de0 a3=0 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4106): avc:  denied  { signal } for  pid=22547 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4107): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4107): arch=c000003e syscall=234 success=no exit=-13 a0=5813 a1=5818 a2=6 a3=8 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4107): avc:  denied  { signal } for  pid=22547 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:11 2026
type=PROCTITLE msg=audit(1774663511.730:4108): proctitle="/opt/mssql/bin/sqlservr"
type=SYSCALL msg=audit(1774663511.730:4108): arch=c000003e syscall=234 success=no exit=-13 a0=5813 a1=5818 a2=6 a3=8 items=0 ppid=22483 pid=22547 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null)
type=AVC msg=audit(1774663511.730:4108): avc:  denied  { signal } for  pid=22547 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:13 2026
type=AVC msg=audit(1774663513.854:4116): avc:  denied  { signal } for  pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:13 2026
type=AVC msg=audit(1774663513.855:4117): avc:  denied  { sigkill } for  pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:13 2026
type=AVC msg=audit(1774663513.855:4118): avc:  denied  { signal } for  pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:13 2026
type=AVC msg=audit(1774663513.855:4119): avc:  denied  { sigkill } for  pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:13 2026
type=AVC msg=audit(1774663513.855:4120): avc:  denied  { signull } for  pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0"
----
time->Fri Mar 27 22:05:13 2026
type=AVC msg=audit(1774663513.855:4121): avc:  denied  { signull } for  pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0"