---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.543:18112): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.543:18112): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55aa33028c40 a2=0 a3=0 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.543:18112): avc: denied { search } for pid=98277 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.543:18113): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.543:18113): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55aa33028c40 a2=0 a3=0 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.543:18113): avc: denied { search } for pid=98277 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.543:18114): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.543:18114): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f0033fba5e9 a2=7f0033c7e640 a3=0 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.543:18114): avc: denied { search } for pid=98277 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.543:18115): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.543:18115): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0033fba5e9 a2=80000 a3=0 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.543:18115): avc: denied { search } for pid=98277 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.543:18116): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.543:18116): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55aa33032b70 a2=0 a3=0 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.543:18116): avc: denied { search } for pid=98277 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.544:18117): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.544:18117): arch=c000003e syscall=0 success=no exit=-13 a0=44 a1=7f0033c7c945 a2=1 a3=7f003408d204 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.544:18117): avc: denied { read } for pid=98277 comm="Wt-8" path="pipe:[369086]" dev="pipefs" ino=369086 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.544:18118): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.544:18118): arch=c000003e syscall=1 success=no exit=-13 a0=84 a1=7f0033c7c000 a2=1 a3=0 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.544:18118): avc: denied { write } for pid=98277 comm="Wt-8" path="pipe:[369087]" dev="pipefs" ino=369087 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.544:18119): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.544:18119): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0030a30380 a2=0 a3=0 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.544:18119): avc: denied { search } for pid=98277 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.544:18120): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.544:18120): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0030a30100 a2=0 a3=0 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.544:18120): avc: denied { search } for pid=98277 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.544:18121): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.544:18121): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0030a18420 a2=0 a3=0 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.544:18121): avc: denied { search } for pid=98277 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.544:18122): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.544:18122): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0030a18990 a2=0 a3=0 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.544:18122): avc: denied { search } for pid=98277 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.544:18123): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.544:18123): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0030a18c30 a2=0 a3=0 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.544:18123): avc: denied { search } for pid=98277 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.544:18124): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.544:18124): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0030a185d0 a2=0 a3=0 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.544:18124): avc: denied { search } for pid=98277 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.544:18125): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.544:18125): arch=c000003e syscall=1 success=no exit=-13 a0=2 a1=55aa33262850 a2=345 a3=7f0033fb1c20 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.544:18125): avc: denied { use } for pid=98277 comm="Wt-8" path="socket:[347760]" dev="sockfs" ino=347760 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.544:18126): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.544:18126): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0033c7d750 a2=241 a3=1b6 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.544:18126): avc: denied { search } for pid=98277 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.544:18127): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.544:18127): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=55aa33028c40 a2=0 a3=0 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.544:18127): avc: denied { search } for pid=98277 comm="Wt-8" name="/" dev="nvme0n1p1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.544:18128): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.544:18128): arch=c000003e syscall=62 success=no exit=-13 a0=17f4e a1=a a2=7f0032847dd8 a3=0 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.544:18128): avc: denied { signal } for pid=98277 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.544:18129): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.544:18129): arch=c000003e syscall=234 success=no exit=-13 a0=17fe5 a1=17fea a2=6 a3=8 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.544:18129): avc: denied { signal } for pid=98277 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:21 2026 type=PROCTITLE msg=audit(1778900301.544:18130): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1778900301.544:18130): arch=c000003e syscall=234 success=no exit=-13 a0=17fe5 a1=17fea a2=6 a3=8 items=0 ppid=98126 pid=98277 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1778900301.544:18130): avc: denied { signal } for pid=98277 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:27 2026 type=AVC msg=audit(1778900307.888:18142): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:27 2026 type=AVC msg=audit(1778900307.888:18143): avc: denied { sigkill } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:27 2026 type=AVC msg=audit(1778900307.888:18144): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:27 2026 type=AVC msg=audit(1778900307.888:18145): avc: denied { sigkill } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri May 15 22:58:27 2026 type=AVC msg=audit(1778900307.889:18146): avc: denied { signull } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0"