---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.446:16911): avc: denied { connectto } for pid=91779 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.478:16912): avc: denied { read } for pid=91787 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.478:16913): avc: denied { read } for pid=91787 comm="systemctl" name="system@c8f192b6a5614ddcb67c3be24d1d478b-0000000000001fce-00063be4a7b2598c.journal" dev="xvda2" ino=1552 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.478:16914): avc: denied { open } for pid=91787 comm="systemctl" path="/var/log/journal/ec2720f5d1ec030d9241c1ef1b9533f6/system@c8f192b6a5614ddcb67c3be24d1d478b-0000000000001fce-00063be4a7b2598c.journal" dev="xvda2" ino=1552 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.478:16915): avc: denied { map } for pid=91787 comm="systemctl" path="/var/log/journal/ec2720f5d1ec030d9241c1ef1b9533f6/system@c8f192b6a5614ddcb67c3be24d1d478b-0000000000001fce-00063be4a7b2598c.journal" dev="xvda2" ino=1552 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.481:16916): avc: denied { getattr } for pid=91788 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.481:16917): avc: denied { execute } for pid=91788 comm="sh" name="rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.481:16918): avc: denied { read } for pid=91788 comm="sh" name="rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.482:16919): avc: denied { open } for pid=91789 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.482:16920): avc: denied { execute_no_trans } for pid=91789 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.482:16921): avc: denied { map } for pid=91789 comm="rpm" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.487:16922): avc: denied { search } for pid=91789 comm="rpm" name="rpm" dev="xvda2" ino=131076 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.487:16923): avc: denied { open } for pid=91789 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite" dev="xvda2" ino=131077 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.487:16924): avc: denied { setattr } for pid=91789 comm="rpm" name="rpmdb.sqlite-wal" dev="xvda2" ino=131078 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.488:16925): avc: denied { map } for pid=91789 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite-shm" dev="xvda2" ino=131079 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:02 2025 type=AVC msg=audit(1754703662.850:16928): avc: denied { connectto } for pid=91800 comm="su" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 8 21:41:09 2025 type=AVC msg=audit(1754703669.831:16933): avc: denied { search } for pid=91998 comm="(sd-askpwagent)" name="fs" dev="proc" ino=4376 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 8 21:41:09 2025 type=AVC msg=audit(1754703669.831:16934): avc: denied { read } for pid=91998 comm="(sd-askpwagent)" name="nr_open" dev="proc" ino=4377 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:09 2025 type=AVC msg=audit(1754703669.831:16935): avc: denied { open } for pid=91998 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=4377 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:09 2025 type=AVC msg=audit(1754703669.831:16936): avc: denied { getattr } for pid=91998 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=4377 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:09 2025 type=AVC msg=audit(1754703669.831:16937): avc: denied { ioctl } for pid=91998 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=4377 ioctlcmd=0x5401 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 8 21:41:09 2025 type=AVC msg=audit(1754703669.839:16940): avc: denied { signal } for pid=91997 comm="systemctl" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tclass=process permissive=1 ---- time->Fri Aug 8 21:41:43 2025 type=AVC msg=audit(1754703703.893:17743): avc: denied { connectto } for pid=96809 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 8 21:41:43 2025 type=AVC msg=audit(1754703703.903:17744): avc: denied { name_connect } for pid=96807 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 8 21:42:33 2025 type=AVC msg=audit(1754703753.471:18943): avc: denied { connectto } for pid=103795 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 8 21:42:33 2025 type=AVC msg=audit(1754703753.480:18944): avc: denied { name_connect } for pid=103793 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 8 21:43:23 2025 type=AVC msg=audit(1754703803.891:20029): avc: denied { connectto } for pid=109485 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 8 21:43:23 2025 type=AVC msg=audit(1754703803.900:20030): avc: denied { name_connect } for pid=109483 comm="python3" dest=1435 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 8 21:44:12 2025 type=AVC msg=audit(1754703852.448:20717): avc: denied { search } for pid=110458 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:12 2025 type=AVC msg=audit(1754703852.448:20718): avc: denied { search } for pid=110458 comm="Wt-8" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:12 2025 type=AVC msg=audit(1754703852.448:20719): avc: denied { read } for pid=110458 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:12 2025 type=AVC msg=audit(1754703852.448:20720): avc: denied { search } for pid=110458 comm="Wt-8" name="110458" dev="proc" ino=419072 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:12 2025 type=AVC msg=audit(1754703852.448:20721): avc: denied { read } for pid=110458 comm="Wt-8" name="statm" dev="proc" ino=420151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:12 2025 type=AVC msg=audit(1754703852.448:20722): avc: denied { open } for pid=110458 comm="Wt-8" path="/proc/110458/statm" dev="proc" ino=420151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:12 2025 type=AVC msg=audit(1754703852.448:20723): avc: denied { getattr } for pid=110458 comm="Wt-8" path="/proc/110458/statm" dev="proc" ino=420151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:12 2025 type=AVC msg=audit(1754703852.448:20724): avc: denied { read } for pid=110458 comm="Wt-8" name="meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:12 2025 type=AVC msg=audit(1754703852.448:20725): avc: denied { open } for pid=110458 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:12 2025 type=AVC msg=audit(1754703852.448:20726): avc: denied { getattr } for pid=110458 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:12 2025 type=AVC msg=audit(1754703852.448:20727): avc: denied { search } for pid=110458 comm="Wt-8" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:12 2025 type=AVC msg=audit(1754703852.448:20728): avc: denied { search } for pid=110458 comm="Wt-8" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:12 2025 type=AVC msg=audit(1754703852.448:20729): avc: denied { getattr } for pid=110458 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=9642 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:12 2025 type=AVC msg=audit(1754703852.448:20730): avc: denied { read } for pid=110458 comm="Wt-8" name="memory.max" dev="cgroup2" ino=9642 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:12 2025 type=AVC msg=audit(1754703852.448:20731): avc: denied { open } for pid=110458 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=9642 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.126:20732): avc: denied { search } for pid=110458 comm="sqlservr" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.126:20733): avc: denied { search } for pid=110458 comm="sqlservr" name="var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.126:20734): avc: denied { search } for pid=110458 comm="sqlservr" name="mssql" dev="xvda2" ino=395155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.285:20736): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.285:20737): avc: denied { signal } for pid=110430 comm="sqlservr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.285:20739): avc: denied { fork } for pid=110458 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.285:20740): avc: denied { setsched } for pid=110458 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.285:20741): avc: denied { getsched } for pid=110458 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.286:20742): avc: denied { use } for pid=110458 comm="Wt-680" path="socket:[418014]" dev="sockfs" ino=418014 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.286:20743): avc: denied { append } for pid=110458 comm="Wt-680" path="socket:[418014]" dev="sockfs" ino=418014 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.286:20744): avc: denied { write } for pid=110458 comm="Wt-680" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.288:20745): avc: denied { write } for pid=110458 comm="Wt-680" path="/var/opt/mssql/log/errorlog" dev="xvda2" ino=393218 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.288:20746): avc: denied { read } for pid=560 comm="systemd-journal" name="status" dev="proc" ino=419937 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.288:20747): avc: denied { open } for pid=560 comm="systemd-journal" path="/proc/110458/status" dev="proc" ino=419937 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.288:20748): avc: denied { getattr } for pid=560 comm="systemd-journal" path="/proc/110458/status" dev="proc" ino=419937 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.288:20749): avc: denied { ioctl } for pid=560 comm="systemd-journal" path="/proc/110458/status" dev="proc" ino=419937 ioctlcmd=0x5401 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.288:20750): avc: denied { read } for pid=560 comm="systemd-journal" name="exe" dev="proc" ino=419306 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.288:20751): avc: denied { getattr } for pid=560 comm="systemd-journal" scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.290:20752): avc: denied { search } for pid=110458 comm="Wt-680" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.290:20753): avc: denied { search } for pid=110458 comm="Wt-680" name="var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.290:20754): avc: denied { search } for pid=110458 comm="Wt-680" name="mssql" dev="xvda2" ino=395155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.290:20755): avc: denied { getattr } for pid=110458 comm="Wt-680" path="/var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.290:20756): avc: denied { getattr } for pid=110458 comm="Wt-680" path="/var/opt/mssql" dev="xvda2" ino=395155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.290:20757): avc: denied { read } for pid=110458 comm="Wt-680" name="system" dev="xvda2" ino=393297 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.290:20758): avc: denied { open } for pid=110458 comm="Wt-680" path="/var/opt/mssql/.system/system" dev="xvda2" ino=393297 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.291:20759): avc: denied { read } for pid=110458 comm="Wt-680" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.291:20760): avc: denied { open } for pid=110458 comm="Wt-680" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.291:20761): avc: denied { getattr } for pid=110458 comm="Wt-680" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.291:20762): avc: denied { read } for pid=110458 comm="Wt-680" name="bin" dev="xvda2" ino=786 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.291:20763): avc: denied { search } for pid=110458 comm="Wt-680" name="usr" dev="xvda2" ino=131073 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.291:20764): avc: denied { read } for pid=110458 comm="Wt-680" name="bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.291:20765): avc: denied { getattr } for pid=110458 comm="Wt-680" path="/usr/bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.291:20766): avc: denied { read } for pid=110458 comm="Wt-680" name="lib" dev="xvda2" ino=805 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.291:20767): avc: denied { read } for pid=110458 comm="Wt-680" name="lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.291:20768): avc: denied { getattr } for pid=110458 comm="Wt-680" path="/usr/lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.292:20769): avc: denied { write } for pid=110458 comm="Wt-660" path="/var/opt/mssql/data/model_replicatedmaster.ldf" dev="xvda2" ino=393342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.328:20770): avc: denied { lock } for pid=110458 comm="Wt-680" path="/var/opt/mssql/data/model_replicatedmaster.mdf" dev="xvda2" ino=393341 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.328:20771): avc: denied { search } for pid=110458 comm="Wt-680" name="etc" dev="xvda2" ino=8193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.328:20772): avc: denied { read } for pid=110458 comm="Wt-680" name="localtime" dev="xvda2" ino=27 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.328:20773): avc: denied { search } for pid=110458 comm="Wt-680" name="zoneinfo" dev="xvda2" ino=131603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.328:20774): avc: denied { getattr } for pid=110458 comm="Wt-680" path="/usr/share/zoneinfo/America/New_York" dev="xvda2" ino=132397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.399:20775): avc: denied { read } for pid=110458 comm="Wt-680" path="/var/opt/mssql/data/modellog.ldf" dev="xvda2" ino=393338 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.440:20776): avc: denied { lock } for pid=110458 comm="Wt-680" path="/var/opt/mssql/log/log_2.trc" dev="xvda2" ino=396407 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.457:20777): avc: denied { read } for pid=110458 comm="Wt-544" name="krb5.conf" dev="xvda2" ino=1415 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 8 21:44:13 2025 type=AVC msg=audit(1754703853.457:20778): avc: denied { getattr } for pid=110458 comm="Wt-544" path="/etc/krb5.conf" dev="xvda2" ino=1415 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0"