---- time->Fri Aug 8 21:35:44 2025 type=AVC msg=audit(1754703344.845:13085): avc: denied { connectto } for pid=69796 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:35:44 2025 type=AVC msg=audit(1754703344.846:13086): avc: denied { connectto } for pid=69796 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:35:44 2025 type=AVC msg=audit(1754703344.856:13087): avc: denied { connectto } for pid=69800 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:35:44 2025 type=AVC msg=audit(1754703344.857:13088): avc: denied { connectto } for pid=69800 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:35:44 2025 type=AVC msg=audit(1754703344.874:13089): avc: denied { read } for pid=69804 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=0 ---- time->Fri Aug 8 21:35:44 2025 type=AVC msg=audit(1754703344.876:13090): avc: denied { getattr } for pid=69805 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=0 ---- time->Fri Aug 8 21:35:44 2025 type=AVC msg=audit(1754703344.889:13091): avc: denied { read } for pid=69807 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=0 ---- time->Fri Aug 8 21:35:44 2025 type=AVC msg=audit(1754703344.900:13094): avc: denied { connectto } for pid=69814 comm="su" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:35:51 2025 type=AVC msg=audit(1754703351.787:13099): avc: denied { search } for pid=70013 comm="(sd-askpwagent)" name="fs" dev="proc" ino=1017 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=0 ---- time->Fri Aug 8 21:36:16 2025 type=AVC msg=audit(1754703376.550:13633): avc: denied { connectto } for pid=72832 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:36:16 2025 type=AVC msg=audit(1754703376.551:13634): avc: denied { connectto } for pid=72832 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:36:16 2025 type=AVC msg=audit(1754703376.558:13635): avc: denied { name_connect } for pid=72830 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=0 ---- time->Fri Aug 8 21:37:18 2025 type=AVC msg=audit(1754703438.648:14719): avc: denied { connectto } for pid=79381 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:37:18 2025 type=AVC msg=audit(1754703438.648:14720): avc: denied { connectto } for pid=79381 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:37:18 2025 type=AVC msg=audit(1754703438.665:14721): avc: denied { read } for pid=79385 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=0 ---- time->Fri Aug 8 21:37:18 2025 type=AVC msg=audit(1754703438.676:14724): avc: denied { connectto } for pid=79392 comm="su" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:38:12 2025 type=AVC msg=audit(1754703492.440:15672): avc: denied { connectto } for pid=84524 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:38:12 2025 type=AVC msg=audit(1754703492.441:15673): avc: denied { connectto } for pid=84524 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:39:14 2025 type=AVC msg=audit(1754703554.576:16673): avc: denied { connectto } for pid=89947 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:39:14 2025 type=AVC msg=audit(1754703554.576:16674): avc: denied { connectto } for pid=89947 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:39:14 2025 type=AVC msg=audit(1754703554.594:16675): avc: denied { read } for pid=89951 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=0 ---- time->Fri Aug 8 21:39:14 2025 type=AVC msg=audit(1754703554.605:16678): avc: denied { connectto } for pid=89958 comm="su" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:40:09 2025 type=AVC msg=audit(1754703609.710:17586): avc: denied { connectto } for pid=95093 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:40:09 2025 type=AVC msg=audit(1754703609.711:17587): avc: denied { connectto } for pid=95093 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:40:09 2025 type=AVC msg=audit(1754703609.719:17588): avc: denied { name_connect } for pid=95091 comm="python3" dest=1432 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=0 ---- time->Fri Aug 8 21:41:08 2025 type=AVC msg=audit(1754703668.400:18556): avc: denied { connectto } for pid=100357 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:41:08 2025 type=AVC msg=audit(1754703668.401:18557): avc: denied { connectto } for pid=100357 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:41:08 2025 type=AVC msg=audit(1754703668.417:18558): avc: denied { read } for pid=100361 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=0 ---- time->Fri Aug 8 21:41:08 2025 type=AVC msg=audit(1754703668.430:18561): avc: denied { connectto } for pid=100368 comm="su" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:41:15 2025 type=AVC msg=audit(1754703675.639:18626): avc: denied { connectto } for pid=100873 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:41:15 2025 type=AVC msg=audit(1754703675.640:18627): avc: denied { connectto } for pid=100873 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 8 21:41:15 2025 type=AVC msg=audit(1754703675.646:18628): avc: denied { name_connect } for pid=100871 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=0 ---- time->Fri Aug 8 21:42:07 2025 type=AVC msg=audit(1754703727.269:19415): avc: denied { search } for pid=101216 comm="sqlservr" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:07 2025 type=AVC msg=audit(1754703727.566:19416): avc: denied { search } for pid=101216 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:07 2025 type=AVC msg=audit(1754703727.566:19417): avc: denied { search } for pid=101216 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:08 2025 type=AVC msg=audit(1754703728.517:19419): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:08 2025 type=AVC msg=audit(1754703728.518:19421): avc: denied { sigkill } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:08 2025 type=AVC msg=audit(1754703728.518:19422): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:08 2025 type=AVC msg=audit(1754703728.518:19423): avc: denied { sigkill } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:08 2025 type=AVC msg=audit(1754703728.518:19424): avc: denied { signull } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:08 2025 type=AVC msg=audit(1754703728.518:19425): avc: denied { signull } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:08 2025 type=AVC msg=audit(1754703728.566:19427): avc: denied { search } for pid=101216 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:08 2025 type=AVC msg=audit(1754703728.566:19428): avc: denied { search } for pid=101216 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:09 2025 type=AVC msg=audit(1754703729.269:19429): avc: denied { search } for pid=101216 comm="sqlservr" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:09 2025 type=AVC msg=audit(1754703729.566:19430): avc: denied { search } for pid=101216 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:09 2025 type=AVC msg=audit(1754703729.566:19431): avc: denied { search } for pid=101216 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:10 2025 type=AVC msg=audit(1754703730.567:19542): avc: denied { search } for pid=101216 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:10 2025 type=AVC msg=audit(1754703730.567:19543): avc: denied { search } for pid=101216 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:11 2025 type=AVC msg=audit(1754703731.270:19600): avc: denied { search } for pid=101216 comm="sqlservr" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:11 2025 type=AVC msg=audit(1754703731.567:19616): avc: denied { search } for pid=101216 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:11 2025 type=AVC msg=audit(1754703731.567:19617): avc: denied { search } for pid=101216 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:12 2025 type=AVC msg=audit(1754703732.567:19675): avc: denied { search } for pid=101216 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:12 2025 type=AVC msg=audit(1754703732.567:19676): avc: denied { search } for pid=101216 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:42:12 2025 type=AVC msg=audit(1754703732.865:19695): avc: denied { signal } for pid=101189 comm="sqlservr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"