---- time->Wed Aug 6 16:44:44 2025 type=AVC msg=audit(1754513084.587:13200): avc: denied { connectto } for pid=70254 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:44:44 2025 type=AVC msg=audit(1754513084.588:13201): avc: denied { connectto } for pid=70254 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:44:44 2025 type=AVC msg=audit(1754513084.597:13202): avc: denied { connectto } for pid=70258 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:44:44 2025 type=AVC msg=audit(1754513084.598:13203): avc: denied { connectto } for pid=70258 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:44:44 2025 type=AVC msg=audit(1754513084.616:13204): avc: denied { read } for pid=70262 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=0 ---- time->Wed Aug 6 16:44:44 2025 type=AVC msg=audit(1754513084.617:13205): avc: denied { getattr } for pid=70263 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=0 ---- time->Wed Aug 6 16:44:44 2025 type=AVC msg=audit(1754513084.630:13206): avc: denied { read } for pid=70265 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=0 ---- time->Wed Aug 6 16:44:44 2025 type=AVC msg=audit(1754513084.641:13209): avc: denied { connectto } for pid=70272 comm="su" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:44:51 2025 type=AVC msg=audit(1754513091.704:13214): avc: denied { search } for pid=70471 comm="(sd-askpwagent)" name="fs" dev="proc" ino=4636 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=0 ---- time->Wed Aug 6 16:45:17 2025 type=AVC msg=audit(1754513117.230:13748): avc: denied { connectto } for pid=73288 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:45:17 2025 type=AVC msg=audit(1754513117.231:13749): avc: denied { connectto } for pid=73288 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:45:17 2025 type=AVC msg=audit(1754513117.239:13750): avc: denied { name_connect } for pid=73286 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=0 ---- time->Wed Aug 6 16:46:15 2025 type=AVC msg=audit(1754513175.248:14834): avc: denied { connectto } for pid=79877 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:46:15 2025 type=AVC msg=audit(1754513175.249:14835): avc: denied { connectto } for pid=79877 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:46:15 2025 type=AVC msg=audit(1754513175.265:14836): avc: denied { read } for pid=79881 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=0 ---- time->Wed Aug 6 16:46:15 2025 type=AVC msg=audit(1754513175.276:14839): avc: denied { connectto } for pid=79888 comm="su" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:47:03 2025 type=AVC msg=audit(1754513223.452:15787): avc: denied { connectto } for pid=85023 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:47:03 2025 type=AVC msg=audit(1754513223.452:15788): avc: denied { connectto } for pid=85023 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:48:01 2025 type=AVC msg=audit(1754513281.478:16788): avc: denied { connectto } for pid=90447 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:48:01 2025 type=AVC msg=audit(1754513281.479:16789): avc: denied { connectto } for pid=90447 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:48:01 2025 type=AVC msg=audit(1754513281.495:16790): avc: denied { read } for pid=90451 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=0 ---- time->Wed Aug 6 16:48:01 2025 type=AVC msg=audit(1754513281.507:16793): avc: denied { connectto } for pid=90458 comm="su" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:48:51 2025 type=AVC msg=audit(1754513331.632:17701): avc: denied { connectto } for pid=95670 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:48:51 2025 type=AVC msg=audit(1754513331.633:17702): avc: denied { connectto } for pid=95670 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:48:51 2025 type=AVC msg=audit(1754513331.642:17703): avc: denied { name_connect } for pid=95668 comm="python3" dest=1432 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=0 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.828:18671): avc: denied { connectto } for pid=100933 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.829:18672): avc: denied { connectto } for pid=100933 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.845:18673): avc: denied { read } for pid=100937 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=0 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.856:18676): avc: denied { connectto } for pid=100944 comm="su" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:49:54 2025 type=AVC msg=audit(1754513394.626:18741): avc: denied { connectto } for pid=101452 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:49:54 2025 type=AVC msg=audit(1754513394.627:18742): avc: denied { connectto } for pid=101452 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Wed Aug 6 16:49:54 2025 type=AVC msg=audit(1754513394.634:18743): avc: denied { name_connect } for pid=101450 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=0 ---- time->Wed Aug 6 16:50:42 2025 type=AVC msg=audit(1754513442.494:19530): avc: denied { search } for pid=101795 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:42 2025 type=AVC msg=audit(1754513442.494:19531): avc: denied { search } for pid=101795 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:43 2025 type=AVC msg=audit(1754513443.195:19533): avc: denied { search } for pid=101795 comm="sqlservr" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:43 2025 type=AVC msg=audit(1754513443.230:19534): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:43 2025 type=AVC msg=audit(1754513443.230:19536): avc: denied { sigkill } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:43 2025 type=AVC msg=audit(1754513443.230:19537): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:43 2025 type=AVC msg=audit(1754513443.231:19538): avc: denied { sigkill } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:43 2025 type=AVC msg=audit(1754513443.231:19539): avc: denied { signull } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:43 2025 type=AVC msg=audit(1754513443.231:19540): avc: denied { signull } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:43 2025 type=AVC msg=audit(1754513443.494:19542): avc: denied { search } for pid=101795 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:43 2025 type=AVC msg=audit(1754513443.495:19543): avc: denied { search } for pid=101795 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:44 2025 type=AVC msg=audit(1754513444.495:19545): avc: denied { search } for pid=101795 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:44 2025 type=AVC msg=audit(1754513444.495:19546): avc: denied { search } for pid=101795 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:45 2025 type=AVC msg=audit(1754513445.196:19654): avc: denied { search } for pid=101795 comm="sqlservr" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:45 2025 type=AVC msg=audit(1754513445.495:19680): avc: denied { search } for pid=101795 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:45 2025 type=AVC msg=audit(1754513445.495:19681): avc: denied { search } for pid=101795 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:46 2025 type=AVC msg=audit(1754513446.495:19687): avc: denied { search } for pid=101795 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:46 2025 type=AVC msg=audit(1754513446.495:19688): avc: denied { search } for pid=101795 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.196:19724): avc: denied { search } for pid=101795 comm="sqlservr" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.495:19750): avc: denied { search } for pid=101795 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.495:19751): avc: denied { search } for pid=101795 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:48 2025 type=AVC msg=audit(1754513448.495:19812): avc: denied { search } for pid=101795 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:48 2025 type=AVC msg=audit(1754513448.495:19813): avc: denied { search } for pid=101795 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:50:48 2025 type=AVC msg=audit(1754513448.570:19814): avc: denied { signal } for pid=101768 comm="sqlservr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"