---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.250:15716): avc: denied { connectto } for pid=86765 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.280:15717): avc: denied { read } for pid=86773 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=1 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.280:15718): avc: denied { read } for pid=86773 comm="systemctl" name="system@b0e0c27c73b9409282c947f8f6a845fc-0000000000001231-00063bb855472173.journal" dev="xvda2" ino=1686 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.280:15719): avc: denied { open } for pid=86773 comm="systemctl" path="/var/log/journal/ec29ff579b29e52b9dcce6d42c2bf606/system@b0e0c27c73b9409282c947f8f6a845fc-0000000000001231-00063bb855472173.journal" dev="xvda2" ino=1686 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.280:15720): avc: denied { map } for pid=86773 comm="systemctl" path="/var/log/journal/ec29ff579b29e52b9dcce6d42c2bf606/system@b0e0c27c73b9409282c947f8f6a845fc-0000000000001231-00063bb855472173.journal" dev="xvda2" ino=1686 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.283:15721): avc: denied { getattr } for pid=86774 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.283:15722): avc: denied { execute } for pid=86774 comm="sh" name="rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.283:15723): avc: denied { read } for pid=86774 comm="sh" name="rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.284:15724): avc: denied { open } for pid=86775 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.284:15725): avc: denied { execute_no_trans } for pid=86775 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.284:15726): avc: denied { map } for pid=86775 comm="rpm" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.289:15727): avc: denied { search } for pid=86775 comm="rpm" name="rpm" dev="xvda2" ino=131076 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir permissive=1 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.289:15728): avc: denied { open } for pid=86775 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite" dev="xvda2" ino=131077 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.289:15729): avc: denied { setattr } for pid=86775 comm="rpm" name="rpmdb.sqlite-wal" dev="xvda2" ino=131078 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:46 2025 type=AVC msg=audit(1754513386.289:15730): avc: denied { map } for pid=86775 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite-shm" dev="xvda2" ino=131079 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:56 2025 type=AVC msg=audit(1754513396.619:15737): avc: denied { search } for pid=86985 comm="(sd-askpwagent)" name="fs" dev="proc" ino=2492 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 ---- time->Wed Aug 6 16:49:56 2025 type=AVC msg=audit(1754513396.619:15738): avc: denied { read } for pid=86985 comm="(sd-askpwagent)" name="nr_open" dev="proc" ino=2493 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:56 2025 type=AVC msg=audit(1754513396.619:15739): avc: denied { open } for pid=86985 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=2493 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:56 2025 type=AVC msg=audit(1754513396.619:15740): avc: denied { getattr } for pid=86985 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=2493 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:56 2025 type=AVC msg=audit(1754513396.619:15741): avc: denied { ioctl } for pid=86985 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=2493 ioctlcmd=0x5401 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:49:56 2025 type=AVC msg=audit(1754513396.628:15744): avc: denied { signal } for pid=86984 comm="systemctl" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tclass=process permissive=1 ---- time->Wed Aug 6 16:50:28 2025 type=AVC msg=audit(1754513428.956:16547): avc: denied { connectto } for pid=91881 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 16:50:28 2025 type=AVC msg=audit(1754513428.965:16548): avc: denied { name_connect } for pid=91879 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 16:51:16 2025 type=AVC msg=audit(1754513476.097:17747): avc: denied { connectto } for pid=98294 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 16:51:16 2025 type=AVC msg=audit(1754513476.106:17748): avc: denied { name_connect } for pid=98292 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 16:52:03 2025 type=AVC msg=audit(1754513523.362:18833): avc: denied { connectto } for pid=103983 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 16:52:03 2025 type=AVC msg=audit(1754513523.372:18834): avc: denied { name_connect } for pid=103981 comm="python3" dest=1435 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.625:19521): avc: denied { search } for pid=104958 comm="sqlservr" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.625:19522): avc: denied { search } for pid=104958 comm="sqlservr" name="var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.625:19523): avc: denied { search } for pid=104958 comm="sqlservr" name="mssql" dev="xvda2" ino=394347 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.957:19524): avc: denied { search } for pid=104958 comm="Wt-8" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.958:19525): avc: denied { read } for pid=104958 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.958:19526): avc: denied { search } for pid=104958 comm="Wt-8" name="104958" dev="proc" ino=408373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.958:19527): avc: denied { read } for pid=104958 comm="Wt-8" name="statm" dev="proc" ino=411441 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.958:19528): avc: denied { open } for pid=104958 comm="Wt-8" path="/proc/104958/statm" dev="proc" ino=411441 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.958:19529): avc: denied { getattr } for pid=104958 comm="Wt-8" path="/proc/104958/statm" dev="proc" ino=411441 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.958:19530): avc: denied { read } for pid=104958 comm="Wt-8" name="meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.958:19531): avc: denied { open } for pid=104958 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.958:19532): avc: denied { getattr } for pid=104958 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.958:19533): avc: denied { search } for pid=104958 comm="Wt-8" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.958:19534): avc: denied { search } for pid=104958 comm="Wt-8" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.958:19535): avc: denied { getattr } for pid=104958 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10451 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.958:19536): avc: denied { read } for pid=104958 comm="Wt-8" name="memory.max" dev="cgroup2" ino=10451 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:49 2025 type=AVC msg=audit(1754513569.958:19537): avc: denied { open } for pid=104958 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10451 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.712:19539): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.712:19540): avc: denied { signal } for pid=104929 comm="sqlservr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.713:19542): avc: denied { fork } for pid=104958 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.713:19543): avc: denied { setsched } for pid=104958 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.713:19544): avc: denied { getsched } for pid=104958 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.714:19545): avc: denied { use } for pid=104958 comm="Wt-632" path="socket:[409416]" dev="sockfs" ino=409416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.714:19546): avc: denied { append } for pid=104958 comm="Wt-632" path="socket:[409416]" dev="sockfs" ino=409416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.714:19547): avc: denied { write } for pid=104958 comm="Wt-632" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.716:19548): avc: denied { write } for pid=104958 comm="Wt-632" path="/var/opt/mssql/log/errorlog" dev="xvda2" ino=393219 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.716:19549): avc: denied { read } for pid=558 comm="systemd-journal" name="status" dev="proc" ino=410091 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.716:19550): avc: denied { open } for pid=558 comm="systemd-journal" path="/proc/104958/status" dev="proc" ino=410091 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.716:19551): avc: denied { getattr } for pid=558 comm="systemd-journal" path="/proc/104958/status" dev="proc" ino=410091 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.716:19552): avc: denied { ioctl } for pid=558 comm="systemd-journal" path="/proc/104958/status" dev="proc" ino=410091 ioctlcmd=0x5401 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.716:19553): avc: denied { read } for pid=558 comm="systemd-journal" name="exe" dev="proc" ino=411452 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.716:19554): avc: denied { getattr } for pid=558 comm="systemd-journal" scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.718:19555): avc: denied { search } for pid=104958 comm="Wt-632" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.718:19556): avc: denied { search } for pid=104958 comm="Wt-632" name="var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.718:19557): avc: denied { search } for pid=104958 comm="Wt-632" name="mssql" dev="xvda2" ino=394347 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.719:19558): avc: denied { getattr } for pid=104958 comm="Wt-632" path="/var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.719:19559): avc: denied { getattr } for pid=104958 comm="Wt-632" path="/var/opt/mssql" dev="xvda2" ino=394347 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.719:19560): avc: denied { read } for pid=104958 comm="Wt-632" name="system" dev="xvda2" ino=394354 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.719:19561): avc: denied { open } for pid=104958 comm="Wt-632" path="/var/opt/mssql/.system/system" dev="xvda2" ino=394354 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.719:19562): avc: denied { read } for pid=104958 comm="Wt-632" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.719:19563): avc: denied { open } for pid=104958 comm="Wt-632" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.719:19564): avc: denied { getattr } for pid=104958 comm="Wt-632" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.719:19565): avc: denied { read } for pid=104958 comm="Wt-632" name="bin" dev="xvda2" ino=786 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.719:19566): avc: denied { search } for pid=104958 comm="Wt-632" name="usr" dev="xvda2" ino=131073 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.719:19567): avc: denied { read } for pid=104958 comm="Wt-632" name="bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.719:19568): avc: denied { getattr } for pid=104958 comm="Wt-632" path="/usr/bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.719:19569): avc: denied { read } for pid=104958 comm="Wt-632" name="lib" dev="xvda2" ino=805 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.719:19570): avc: denied { read } for pid=104958 comm="Wt-632" name="lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.719:19571): avc: denied { getattr } for pid=104958 comm="Wt-632" path="/usr/lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.722:19572): avc: denied { write } for pid=104958 comm="Wt-672" path="/var/opt/mssql/data/model_replicatedmaster.ldf" dev="xvda2" ino=394399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.757:19573): avc: denied { lock } for pid=104958 comm="Wt-632" path="/var/opt/mssql/data/model_replicatedmaster.mdf" dev="xvda2" ino=394398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.758:19574): avc: denied { search } for pid=104958 comm="Wt-632" name="etc" dev="xvda2" ino=8193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.758:19575): avc: denied { read } for pid=104958 comm="Wt-632" name="localtime" dev="xvda2" ino=27 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.758:19576): avc: denied { search } for pid=104958 comm="Wt-632" name="zoneinfo" dev="xvda2" ino=131603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.758:19577): avc: denied { getattr } for pid=104958 comm="Wt-632" path="/usr/share/zoneinfo/America/New_York" dev="xvda2" ino=132397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.827:19578): avc: denied { read } for pid=104958 comm="Wt-632" path="/var/opt/mssql/data/modellog.ldf" dev="xvda2" ino=394395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.866:19579): avc: denied { lock } for pid=104958 comm="Wt-632" path="/var/opt/mssql/log/log_2.trc" dev="xvda2" ino=394432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.884:19580): avc: denied { read } for pid=104958 comm="Wt-536" name="krb5.conf" dev="xvda2" ino=1415 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:52:50 2025 type=AVC msg=audit(1754513570.884:19581): avc: denied { getattr } for pid=104958 comm="Wt-536" path="/etc/krb5.conf" dev="xvda2" ino=1415 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0"