---- time->Fri Aug 1 10:42:21 2025 type=PROCTITLE msg=audit(1754059341.834:14050): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1754059341.834:14050): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffe2c133710 a2=2d a3=0 items=0 ppid=82629 pid=82630 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1754059341.834:14050): avc: denied { connectto } for pid=82630 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 1 10:42:21 2025 type=PROCTITLE msg=audit(1754059341.834:14051): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1754059341.834:14051): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffe2c133700 a2=2d a3=56257d5e2a00 items=0 ppid=82629 pid=82630 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1754059341.834:14051): avc: denied { connectto } for pid=82630 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 1 10:42:21 2025 type=PROCTITLE msg=audit(1754059341.846:14052): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1754059341.846:14052): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffd66a2f200 a2=2d a3=0 items=0 ppid=82633 pid=82634 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1754059341.846:14052): avc: denied { connectto } for pid=82634 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 1 10:42:21 2025 type=PROCTITLE msg=audit(1754059341.846:14053): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1754059341.846:14053): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffd66a2f1f0 a2=2d a3=55a95523aa00 items=0 ppid=82633 pid=82634 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1754059341.846:14053): avc: denied { connectto } for pid=82634 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 1 10:42:21 2025 type=PROCTITLE msg=audit(1754059341.866:14054): proctitle=2F62696E2F7368002D63006966202020686173682064706B673B207468656E20636D643D2264706B67202D2D6C697374223B2020202020202020202020202020202020202020656C69662068617368202072706D3B207468656E20636D643D2272706D202D7161223B20202020202020202020202020202020202020656C7365 type=SYSCALL msg=audit(1754059341.866:14054): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55c9fa3fa260 a2=7ffcf76e2990 a3=0 items=0 ppid=82628 pid=82639 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="sh" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1754059341.866:14054): avc: denied { getattr } for pid=82639 comm="sh" path="/usr/bin/rpm" dev="xvda1" ino=640124 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=0 ---- time->Fri Aug 1 10:42:21 2025 type=PROCTITLE msg=audit(1754059341.889:14057): proctitle=7375002D70002D63002F6F70742F6D7373716C2F62696E2F73716C7365727672202D2D7365747570202D2D72657365742D73612D70617373776F7264006D7373716C type=SYSCALL msg=audit(1754059341.889:14057): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7fffc0b229e0 a2=2d a3=5633c8924750 items=0 ppid=82642 pid=82648 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="su" exe="/usr/bin/su" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1754059341.889:14057): avc: denied { connectto } for pid=82648 comm="su" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 1 10:42:21 2025 type=PROCTITLE msg=audit(1754059341.890:14059): proctitle=7375002D70002D63002F6F70742F6D7373716C2F62696E2F73716C7365727672202D2D7365747570202D2D72657365742D73612D70617373776F7264006D7373716C type=SYSCALL msg=audit(1754059341.890:14059): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7fffc0b225a0 a2=2d a3=5633c8924700 items=0 ppid=82642 pid=82648 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="su" exe="/usr/bin/su" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1754059341.890:14059): avc: denied { connectto } for pid=82648 comm="su" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 1 10:42:27 2025 type=PROCTITLE msg=audit(1754059347.763:14063): proctitle="(sd-askpwagent)" type=SYSCALL msg=audit(1754059347.763:14063): arch=c000003e syscall=59 success=no exit=-13 a0=7f4734cc4f78 a1=7fffa1cfabb0 a2=7fffa1cfb448 a3=0 items=0 ppid=82846 pid=82847 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="(sd-askpwagent)" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=SELINUX_ERR msg=audit(1754059347.763:14063): op=security_compute_sid invalid_context="unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:systemd_passwd_agent_exec_t:s0 tclass=process ---- time->Fri Aug 1 10:42:54 2025 type=PROCTITLE msg=audit(1754059374.551:14850): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1754059374.551:14850): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffddbfcf520 a2=2d a3=0 items=0 ppid=87131 pid=87132 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1754059374.551:14850): avc: denied { connectto } for pid=87132 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 1 10:42:54 2025 type=PROCTITLE msg=audit(1754059374.551:14851): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1754059374.551:14851): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffddbfcf510 a2=2d a3=5606de2b2a00 items=0 ppid=87131 pid=87132 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1754059374.551:14851): avc: denied { connectto } for pid=87132 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 1 10:42:54 2025 type=PROCTITLE msg=audit(1754059374.559:14852): proctitle=707974686F6E33002F6F70742F6D7373716C2F62696E2F2E2E2F6C69622F6D7373716C2D636F6E662F6D7373716C2D636F6E662E707900736574006E6574776F726B2E746370706F72740031343333 type=SYSCALL msg=audit(1754059374.559:14852): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffe4179f540 a2=10 a3=7f2ce7b5c9f1 items=0 ppid=87128 pid=87130 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1754059374.559:14852): avc: denied { name_connect } for pid=87130 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=0 ---- time->Fri Aug 1 10:44:21 2025 type=PROCTITLE msg=audit(1754059461.883:17159): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1754059461.883:17159): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffd2fa78f10 a2=2d a3=0 items=0 ppid=98824 pid=98825 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1754059461.883:17159): avc: denied { connectto } for pid=98825 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 1 10:44:21 2025 type=PROCTITLE msg=audit(1754059461.883:17160): proctitle=676574656E740067726F7570006D7373716C type=SYSCALL msg=audit(1754059461.883:17160): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffd2fa78f00 a2=2d a3=563bbe6d0a00 items=0 ppid=98824 pid=98825 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="getent" exe="/usr/bin/getent" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1754059461.883:17160): avc: denied { connectto } for pid=98825 comm="getent" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=0 ---- time->Fri Aug 1 10:44:21 2025 type=PROCTITLE msg=audit(1754059461.891:17161): proctitle=707974686F6E33002F6F70742F6D7373716C2F62696E2F2E2E2F6C69622F6D7373716C2D636F6E662F6D7373716C2D636F6E662E707900736574006E6574776F726B2E746370706F72740031343335 type=SYSCALL msg=audit(1754059461.891:17161): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffec7e27d10 a2=10 a3=7f62271a59f1 items=0 ppid=98821 pid=98823 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=7 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1754059461.891:17161): avc: denied { name_connect } for pid=98823 comm="python3" dest=1435 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=0 ---- time->Fri Aug 1 10:45:00 2025 type=PROCTITLE msg=audit(1754059500.718:17807): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059500.718:17807): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f7b2b5f5420 a2=7f7b2b47e0c0 a3=0 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="sqlservr" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059500.718:17807): avc: denied { search } for pid=99758 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:01 2025 type=PROCTITLE msg=audit(1754059501.028:17808): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059501.028:17808): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563e9ae6e4bc a2=0 a3=0 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059501.028:17808): avc: denied { search } for pid=99758 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:01 2025 type=PROCTITLE msg=audit(1754059501.028:17809): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059501.028:17809): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563e9ae655d1 a2=0 a3=0 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059501.028:17809): avc: denied { search } for pid=99758 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:01 2025 type=PROCTITLE msg=audit(1754059501.272:17810): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059501.272:17810): arch=c000003e syscall=435 success=no exit=-13 a0=7f7b25a2bc00 a1=58 a2=7f7b2ca8afd0 a3=8 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-168" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059501.272:17810): avc: denied { fork } for pid=99758 comm="Wt-168" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:01 2025 type=PROCTITLE msg=audit(1754059501.714:17811): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059501.714:17811): arch=c000003e syscall=435 success=no exit=-13 a0=7f7b255c9c00 a1=58 a2=7f7b2ca8afd0 a3=8 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-344" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059501.714:17811): avc: denied { fork } for pid=99758 comm="Wt-344" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:02 2025 type=PROCTITLE msg=audit(1754059502.028:17814): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059502.028:17814): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563e9ae6e4bc a2=0 a3=0 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059502.028:17814): avc: denied { search } for pid=99758 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:02 2025 type=PROCTITLE msg=audit(1754059502.028:17815): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059502.028:17815): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563e9ae655d1 a2=0 a3=0 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe="/opt/mssql/bin/sqlservr" subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059502.028:17815): avc: denied { search } for pid=99758 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:02 2025 type=AVC msg=audit(1754059502.097:17816): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:02 2025 type=AVC msg=audit(1754059502.097:17817): avc: denied { sigkill } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:02 2025 type=AVC msg=audit(1754059502.097:17818): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:02 2025 type=AVC msg=audit(1754059502.097:17819): avc: denied { sigkill } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:02 2025 type=AVC msg=audit(1754059502.097:17820): avc: denied { signull } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:02 2025 type=AVC msg=audit(1754059502.097:17821): avc: denied { signull } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:02 2025 type=PROCTITLE msg=audit(1754059502.718:17847): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059502.718:17847): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f7b2b5f5420 a2=7f7b2b47e0c0 a3=0 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="sqlservr" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059502.718:17847): avc: denied { search } for pid=99758 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:03 2025 type=PROCTITLE msg=audit(1754059503.028:17849): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059503.028:17849): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563e9ae6e4bc a2=0 a3=0 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059503.028:17849): avc: denied { search } for pid=99758 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:03 2025 type=PROCTITLE msg=audit(1754059503.029:17850): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059503.029:17850): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563e9ae655d1 a2=0 a3=0 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059503.029:17850): avc: denied { search } for pid=99758 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:04 2025 type=PROCTITLE msg=audit(1754059504.029:17900): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059504.029:17900): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563e9ae6e4bc a2=0 a3=0 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059504.029:17900): avc: denied { search } for pid=99758 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:04 2025 type=PROCTITLE msg=audit(1754059504.029:17901): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059504.029:17901): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563e9ae655d1 a2=0 a3=0 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059504.029:17901): avc: denied { search } for pid=99758 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:04 2025 type=PROCTITLE msg=audit(1754059504.700:17952): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059504.700:17952): arch=c000003e syscall=203 success=no exit=-13 a0=18d17 a1=8 a2=7f7b27884f48 a3=8 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-792" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059504.700:17952): avc: denied { setsched } for pid=99758 comm="Wt-792" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:04 2025 type=PROCTITLE msg=audit(1754059504.700:17953): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059504.700:17953): arch=c000003e syscall=203 success=no exit=-13 a0=18d17 a1=8 a2=7f7b2718e310 a3=8 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-800" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059504.700:17953): avc: denied { setsched } for pid=99758 comm="Wt-800" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:04 2025 type=PROCTITLE msg=audit(1754059504.700:17954): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059504.700:17954): arch=c000003e syscall=435 success=no exit=-13 a0=7f7b24059c00 a1=58 a2=7f7b2ca8afd0 a3=8 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-792" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059504.700:17954): avc: denied { fork } for pid=99758 comm="Wt-792" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:04 2025 type=PROCTITLE msg=audit(1754059504.700:17955): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059504.700:17955): arch=c000003e syscall=435 success=no exit=-13 a0=7f7b24059c00 a1=58 a2=7f7b2ca8afd0 a3=8 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-792" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059504.700:17955): avc: denied { fork } for pid=99758 comm="Wt-792" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:04 2025 type=PROCTITLE msg=audit(1754059504.718:17959): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059504.718:17959): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7f7b2b5f5420 a2=7f7b2b47e0c0 a3=0 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="sqlservr" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059504.718:17959): avc: denied { search } for pid=99758 comm="sqlservr" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:05 2025 type=PROCTITLE msg=audit(1754059505.030:17977): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059505.030:17977): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563e9ae6e4bc a2=0 a3=0 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059505.030:17977): avc: denied { search } for pid=99758 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:05 2025 type=PROCTITLE msg=audit(1754059505.030:17978): proctitle="/opt/mssql/bin/sqlservr" type=SYSCALL msg=audit(1754059505.030:17978): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=563e9ae655d1 a2=0 a3=0 items=0 ppid=99731 pid=99758 auid=4294967295 uid=993 gid=993 euid=993 suid=993 fsuid=993 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="Wt-8" exe=2F6F70742F6D7373716C2F62696E2F73716C7365727672202864656C6574656429 subj=system_u:object_r:unlabeled_t:s0 key=(null) type=AVC msg=audit(1754059505.030:17978): avc: denied { search } for pid=99758 comm="Wt-8" name="/" dev="xvda1" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 1 10:45:05 2025 type=AVC msg=audit(1754059505.776:18032): avc: denied { signal } for pid=99731 comm="sqlservr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0"