---- time->Tue Jan 6 19:24:46 2026 type=PROCTITLE msg=audit(1767745486.568:4692): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1767745486.568:4692): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffd5db08ca0 a2=2d a3=0 items=0 ppid=30295 pid=30296 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=8 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1767745486.568:4692): avc: denied { connectto } for pid=30296 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Tue Jan 6 19:24:46 2026 type=PROCTITLE msg=audit(1767745486.568:4693): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1767745486.568:4693): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffd5db08c90 a2=2d a3=5588f1b82a00 items=0 ppid=30295 pid=30296 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=8 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1767745486.568:4693): avc: denied { connectto } for pid=30296 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Tue Jan 6 19:24:46 2026 type=PROCTITLE msg=audit(1767745486.581:4694): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1767745486.581:4694): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffc4c5d2fb0 a2=2d a3=0 items=0 ppid=30299 pid=30300 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=8 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1767745486.581:4694): avc: denied { connectto } for pid=30300 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Tue Jan 6 19:24:46 2026 type=PROCTITLE msg=audit(1767745486.581:4695): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1767745486.581:4695): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffc4c5d2fa0 a2=2d a3=55b30ea73a00 items=0 ppid=30299 pid=30300 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=8 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1767745486.581:4695): avc: denied { connectto } for pid=30300 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Tue Jan 6 19:24:46 2026 type=PROCTITLE msg=audit(1767745486.601:4696): proctitle=2F62696E2F7368002D63006966202020686173682064706B673B207468656E20636D643D2264706B67202D2D6C697374223B2020202020202020202020202020202020202020656C69662068617368202072706D3B207468656E20636D643D2272706D202D7161223B20202020202020202020202020202020202020656C7365 type=SYSCALL msg=audit(1767745486.601:4696): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5630775c4260 a2=7ffc74d9a9d0 a3=0 items=0 ppid=30294 pid=30305 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=8 comm="sh" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1767745486.601:4696): avc: denied { getattr } for pid=30305 comm="sh" path="/usr/bin/rpm" dev="xvda1" ino=809055 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=0 ---- time->Tue Jan 6 19:24:46 2026 type=PROCTITLE msg=audit(1767745486.625:4699): proctitle=7375002D70002D63002F6F70742F6D7373716C2F62696E2F73716C7365727672202D2D7365747570202D2D72657365742D73612D70617373776F7264006D7373716C type=SYSCALL msg=audit(1767745486.625:4699): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffd4e8a7e60 a2=2d a3=560401f7c780 items=0 ppid=30308 pid=30314 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=8 comm="su" exe="/usr/bin/su" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1767745486.625:4699): avc: denied { connectto } for pid=30314 comm="su" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Tue Jan 6 19:24:46 2026 type=PROCTITLE msg=audit(1767745486.625:4701): proctitle=7375002D70002D63002F6F70742F6D7373716C2F62696E2F73716C7365727672202D2D7365747570202D2D72657365742D73612D70617373776F7264006D7373716C type=SYSCALL msg=audit(1767745486.625:4701): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffd4e8a7a20 a2=2d a3=560401f7c700 items=0 ppid=30308 pid=30314 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=8 comm="su" exe="/usr/bin/su" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1767745486.625:4701): avc: denied { connectto } for pid=30314 comm="su" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Tue Jan 6 19:24:52 2026 type=PROCTITLE msg=audit(1767745492.512:4705): proctitle="(sd-askpwagent)" type=SYSCALL msg=audit(1767745492.512:4705): arch=c000003e syscall=59 success=no exit=-13 a0=7fa5ce6c5f98 a1=7ffeb535fa60 a2=7ffeb53602d8 a3=0 items=0 ppid=30513 pid=30514 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=8 comm="(sd-askpwagent)" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=SELINUX_ERR msg=audit(1767745492.512:4705): op=security_compute_sid invalid_context="unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:systemd_passwd_agent_exec_t:s0 tclass=process ---- time->Tue Jan 6 19:25:28 2026 type=PROCTITLE msg=audit(1767745528.775:5297): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1767745528.775:5297): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffdd0104350 a2=2d a3=0 items=0 ppid=37128 pid=37129 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=8 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1767745528.775:5297): avc: denied { connectto } for pid=37129 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Tue Jan 6 19:25:28 2026 type=PROCTITLE msg=audit(1767745528.775:5298): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1767745528.775:5298): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffdd0104340 a2=2d a3=56002cd13a00 items=0 ppid=37128 pid=37129 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=8 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1767745528.775:5298): avc: denied { connectto } for pid=37129 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Tue Jan 6 19:25:28 2026 type=PROCTITLE msg=audit(1767745528.783:5299): proctitle=707974686F6E33002F6F70742F6D7373716C2F62696E2F2E2E2F6C69622F6D7373716C2D636F6E662F6D7373716C2D636F6E662E707900736574006E6574776F726B2E746370706F72740031343333 type=SYSCALL msg=audit(1767745528.783:5299): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffc1d776ab0 a2=10 a3=7efcd35b69f1 items=0 ppid=37125 pid=37127 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=8 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1767745528.783:5299): avc: denied { name_connect } for pid=37127 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=0 ---- time->Tue Jan 6 19:26:38 2026 type=PROCTITLE msg=audit(1767745598.193:6557): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745598.193:6557): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f1517ff5480 a2=7f1517e7e0c0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="sqlservr" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745598.193:6557): avc: denied { search } for pid=37486 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:38 2026 type=PROCTITLE msg=audit(1767745598.503:6558): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745598.503:6558): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563ecb2bc45f a2=0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745598.503:6558): avc: denied { search } for pid=37486 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:38 2026 type=PROCTITLE msg=audit(1767745598.503:6559): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745598.503:6559): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563ecb2b3554 a2=0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745598.503:6559): avc: denied { search } for pid=37486 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:39 2026 type=PROCTITLE msg=audit(1767745599.285:6560): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745599.285:6560): arch=c000003e syscall=203 success=no exit=-13 a0=9540 a1=8 a2=7f1515aaa900 a3=8 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-632" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745599.285:6560): avc: denied { setsched } for pid=37486 comm="Wt-632" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:39 2026 type=PROCTITLE msg=audit(1767745599.289:6561): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745599.289:6561): arch=c000003e syscall=203 success=no exit=-13 a0=9540 a1=8 a2=7f1515aaa900 a3=8 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-632" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745599.289:6561): avc: denied { setsched } for pid=37486 comm="Wt-632" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:39 2026 type=PROCTITLE msg=audit(1767745599.503:6563): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745599.503:6563): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563ecb2bc45f a2=0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745599.503:6563): avc: denied { search } for pid=37486 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:39 2026 type=PROCTITLE msg=audit(1767745599.503:6564): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745599.503:6564): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563ecb2b3554 a2=0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745599.503:6564): avc: denied { search } for pid=37486 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:39 2026 type=AVC msg=audit(1767745599.664:6566): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:39 2026 type=AVC msg=audit(1767745599.664:6567): avc: denied { sigkill } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:39 2026 type=AVC msg=audit(1767745599.664:6568): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:39 2026 type=AVC msg=audit(1767745599.664:6569): avc: denied { sigkill } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:39 2026 type=AVC msg=audit(1767745599.665:6570): avc: denied { signull } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:39 2026 type=AVC msg=audit(1767745599.665:6571): avc: denied { signull } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:40 2026 type=PROCTITLE msg=audit(1767745600.162:6597): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745600.162:6597): arch=c000003e syscall=203 success=no exit=-13 a0=a99b a1=8 a2=7f1513abfe30 a3=8 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-800" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745600.162:6597): avc: denied { setsched } for pid=37486 comm="Wt-800" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:40 2026 type=PROCTITLE msg=audit(1767745600.163:6598): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745600.163:6598): arch=c000003e syscall=435 success=no exit=-13 a0=7f15105ddc00 a1=58 a2=7f151968afe0 a3=8 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-800" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745600.163:6598): avc: denied { fork } for pid=37486 comm="Wt-800" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:40 2026 type=PROCTITLE msg=audit(1767745600.163:6599): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745600.163:6599): arch=c000003e syscall=203 success=no exit=-13 a0=a99b a1=8 a2=7f1513e17fa0 a3=8 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-824" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745600.163:6599): avc: denied { setsched } for pid=37486 comm="Wt-824" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:40 2026 type=PROCTITLE msg=audit(1767745600.164:6600): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745600.164:6600): arch=c000003e syscall=435 success=no exit=-13 a0=7f15105ddc00 a1=58 a2=7f151968afe0 a3=8 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-800" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745600.164:6600): avc: denied { fork } for pid=37486 comm="Wt-800" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:40 2026 type=PROCTITLE msg=audit(1767745600.194:6601): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745600.194:6601): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f1517ff5480 a2=7f1517e7e0c0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="sqlservr" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745600.194:6601): avc: denied { search } for pid=37486 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:40 2026 type=PROCTITLE msg=audit(1767745600.503:6602): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745600.503:6602): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563ecb2bc45f a2=0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745600.503:6602): avc: denied { search } for pid=37486 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:40 2026 type=PROCTITLE msg=audit(1767745600.503:6603): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745600.503:6603): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563ecb2b3554 a2=0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745600.503:6603): avc: denied { search } for pid=37486 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:41 2026 type=PROCTITLE msg=audit(1767745601.503:6625): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745601.503:6625): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563ecb2bc45f a2=0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745601.503:6625): avc: denied { search } for pid=37486 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:41 2026 type=PROCTITLE msg=audit(1767745601.503:6626): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745601.503:6626): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563ecb2b3554 a2=0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745601.503:6626): avc: denied { search } for pid=37486 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:42 2026 type=PROCTITLE msg=audit(1767745602.195:6667): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745602.195:6667): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f1517ff5480 a2=7f1517e7e0c0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="sqlservr" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745602.195:6667): avc: denied { search } for pid=37486 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:42 2026 type=PROCTITLE msg=audit(1767745602.503:6691): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745602.503:6691): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563ecb2bc45f a2=0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745602.503:6691): avc: denied { search } for pid=37486 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:42 2026 type=PROCTITLE msg=audit(1767745602.503:6692): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745602.503:6692): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563ecb2b3554 a2=0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745602.503:6692): avc: denied { search } for pid=37486 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:42 2026 type=PROCTITLE msg=audit(1767745602.849:6710): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745602.849:6710): arch=c000003e syscall=435 success=no exit=-13 a0=7f1511d14c00 a1=58 a2=7f151968afe0 a3=8 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-508" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745602.849:6710): avc: denied { fork } for pid=37486 comm="Wt-508" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:42 2026 type=PROCTITLE msg=audit(1767745602.849:6711): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745602.849:6711): arch=c000003e syscall=435 success=no exit=-13 a0=7f1511d14c00 a1=58 a2=7f151968afe0 a3=8 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-508" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745602.849:6711): avc: denied { fork } for pid=37486 comm="Wt-508" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:43 2026 type=PROCTITLE msg=audit(1767745603.504:6732): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745603.504:6732): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563ecb2bc45f a2=0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745603.504:6732): avc: denied { search } for pid=37486 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:43 2026 type=PROCTITLE msg=audit(1767745603.504:6733): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745603.504:6733): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563ecb2b3554 a2=0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745603.504:6733): avc: denied { search } for pid=37486 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:44 2026 type=PROCTITLE msg=audit(1767745604.194:6764): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745604.194:6764): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f1517ff5480 a2=7f1517e7e0c0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="sqlservr" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745604.194:6764): avc: denied { search } for pid=37486 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:44 2026 type=PROCTITLE msg=audit(1767745604.504:6778): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745604.504:6778): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563ecb2bc45f a2=0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745604.504:6778): avc: denied { search } for pid=37486 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:44 2026 type=PROCTITLE msg=audit(1767745604.504:6779): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1767745604.504:6779): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563ecb2b3554 a2=0 a3=0 items=0 ppid=37434 pid=37486 auid=4294967295 uid=995 gid=995 euid=995 suid=995 fsuid=995 egid=995 sgid=995 fsgid=995 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1767745604.504:6779): avc: denied { search } for pid=37486 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Tue Jan 6 19:26:44 2026 type=AVC msg=audit(1767745604.732:6790): avc: denied { signal } for pid=37434 comm="sqlservr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"