---- time->Fri Aug 22 21:34:31 2025 type=AVC msg=audit(1755912871.076:17738): avc: denied { connectto } for pid=97149 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:34:31 2025 type=AVC msg=audit(1755912871.105:17739): avc: denied { read } for pid=97157 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 22 21:34:31 2025 type=AVC msg=audit(1755912871.105:17740): avc: denied { read } for pid=97157 comm="systemctl" name="system@d4c57af253b844049255e1f4b887faf5-00000000000009a8-00063cfe21f1c566.journal" dev="xvda2" ino=1583 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:31 2025 type=AVC msg=audit(1755912871.105:17741): avc: denied { open } for pid=97157 comm="systemctl" path="/var/log/journal/ec2059eb3b6294a280cc516da8262e62/system@d4c57af253b844049255e1f4b887faf5-00000000000009a8-00063cfe21f1c566.journal" dev="xvda2" ino=1583 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:31 2025 type=AVC msg=audit(1755912871.105:17742): avc: denied { map } for pid=97157 comm="systemctl" path="/var/log/journal/ec2059eb3b6294a280cc516da8262e62/system@d4c57af253b844049255e1f4b887faf5-00000000000009a8-00063cfe21f1c566.journal" dev="xvda2" ino=1583 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:31 2025 type=AVC msg=audit(1755912871.108:17743): avc: denied { getattr } for pid=97158 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158381 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:31 2025 type=AVC msg=audit(1755912871.108:17744): avc: denied { execute } for pid=97158 comm="sh" name="rpm" dev="xvda2" ino=158381 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:31 2025 type=AVC msg=audit(1755912871.108:17745): avc: denied { read } for pid=97158 comm="sh" name="rpm" dev="xvda2" ino=158381 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:31 2025 type=AVC msg=audit(1755912871.108:17746): avc: denied { open } for pid=97159 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158381 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:31 2025 type=AVC msg=audit(1755912871.108:17747): avc: denied { execute_no_trans } for pid=97159 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158381 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:31 2025 type=AVC msg=audit(1755912871.109:17748): avc: denied { map } for pid=97159 comm="rpm" path="/usr/bin/rpm" dev="xvda2" ino=158381 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:31 2025 type=AVC msg=audit(1755912871.113:17749): avc: denied { search } for pid=97159 comm="rpm" name="rpm" dev="xvda2" ino=131076 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 22 21:34:31 2025 type=AVC msg=audit(1755912871.113:17750): avc: denied { open } for pid=97159 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite" dev="xvda2" ino=131077 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:31 2025 type=AVC msg=audit(1755912871.114:17751): avc: denied { setattr } for pid=97159 comm="rpm" name="rpmdb.sqlite-wal" dev="xvda2" ino=131078 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:31 2025 type=AVC msg=audit(1755912871.114:17752): avc: denied { map } for pid=97159 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite-shm" dev="xvda2" ino=131079 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:37 2025 type=AVC msg=audit(1755912877.979:17759): avc: denied { search } for pid=97367 comm="(sd-askpwagent)" name="fs" dev="proc" ino=647 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 22 21:34:37 2025 type=AVC msg=audit(1755912877.979:17760): avc: denied { read } for pid=97367 comm="(sd-askpwagent)" name="nr_open" dev="proc" ino=648 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:37 2025 type=AVC msg=audit(1755912877.979:17761): avc: denied { open } for pid=97367 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=648 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:37 2025 type=AVC msg=audit(1755912877.979:17762): avc: denied { getattr } for pid=97367 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=648 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:37 2025 type=AVC msg=audit(1755912877.979:17763): avc: denied { ioctl } for pid=97367 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=648 ioctlcmd=0x5401 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:34:37 2025 type=AVC msg=audit(1755912877.986:17766): avc: denied { signal } for pid=97366 comm="systemctl" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tclass=process permissive=1 ---- time->Fri Aug 22 21:35:01 2025 type=AVC msg=audit(1755912901.380:18408): avc: denied { connectto } for pid=101106 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:35:02 2025 type=AVC msg=audit(1755912902.573:18469): avc: denied { connectto } for pid=101424 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:35:08 2025 type=AVC msg=audit(1755912908.016:18680): avc: denied { name_connect } for pid=102537 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 22 21:35:49 2025 type=AVC msg=audit(1755912949.371:19772): avc: denied { connectto } for pid=108394 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:35:57 2025 type=AVC msg=audit(1755912957.165:20103): avc: denied { name_connect } for pid=110134 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 22 21:36:38 2025 type=AVC msg=audit(1755912998.488:21249): avc: denied { connectto } for pid=116415 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:36:45 2025 type=AVC msg=audit(1755913005.247:21580): avc: denied { name_connect } for pid=118155 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 22 21:37:23 2025 type=AVC msg=audit(1755913043.345:22546): avc: denied { connectto } for pid=123419 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:37:30 2025 type=AVC msg=audit(1755913050.105:22877): avc: denied { name_connect } for pid=125161 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 22 21:38:18 2025 type=AVC msg=audit(1755913098.501:24187): avc: denied { connectto } for pid=131751 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:38:25 2025 type=AVC msg=audit(1755913105.353:24518): avc: denied { name_connect } for pid=133494 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 22 21:39:05 2025 type=AVC msg=audit(1755913145.440:25453): avc: denied { connectto } for pid=139322 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:39:12 2025 type=AVC msg=audit(1755913152.322:25784): avc: denied { name_connect } for pid=141062 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.520:26362): avc: denied { fork } for pid=141487 comm="Wt-348" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.520:26363): avc: denied { setsched } for pid=141487 comm="Wt-348" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.520:26364): avc: denied { getsched } for pid=141487 comm="Wt-348" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.775:26366): avc: denied { search } for pid=141487 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.775:26367): avc: denied { search } for pid=141487 comm="Wt-8" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.775:26368): avc: denied { read } for pid=141487 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.775:26369): avc: denied { search } for pid=141487 comm="Wt-8" name="141487" dev="proc" ino=558790 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.775:26370): avc: denied { read } for pid=141487 comm="Wt-8" name="statm" dev="proc" ino=558948 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.775:26371): avc: denied { open } for pid=141487 comm="Wt-8" path="/proc/141487/statm" dev="proc" ino=558948 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.775:26372): avc: denied { getattr } for pid=141487 comm="Wt-8" path="/proc/141487/statm" dev="proc" ino=558948 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.775:26373): avc: denied { read } for pid=141487 comm="Wt-8" name="meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.775:26374): avc: denied { open } for pid=141487 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.775:26375): avc: denied { getattr } for pid=141487 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.775:26376): avc: denied { search } for pid=141487 comm="Wt-8" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.775:26377): avc: denied { search } for pid=141487 comm="Wt-8" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.775:26378): avc: denied { getattr } for pid=141487 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10805 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.775:26379): avc: denied { read } for pid=141487 comm="Wt-8" name="memory.max" dev="cgroup2" ino=10805 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:48 2025 type=AVC msg=audit(1755913188.775:26380): avc: denied { open } for pid=141487 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10805 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.462:26381): avc: denied { search } for pid=141487 comm="sqlservr" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.462:26382): avc: denied { search } for pid=141487 comm="sqlservr" name="var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.462:26383): avc: denied { search } for pid=141487 comm="sqlservr" name="mssql" dev="xvda2" ino=394347 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.776:26385): avc: denied { search } for pid=141487 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.776:26386): avc: denied { search } for pid=141487 comm="Wt-8" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.776:26387): avc: denied { read } for pid=141487 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.776:26388): avc: denied { search } for pid=141487 comm="Wt-8" name="141487" dev="proc" ino=558790 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.776:26389): avc: denied { read } for pid=141487 comm="Wt-8" name="statm" dev="proc" ino=558948 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.776:26390): avc: denied { open } for pid=141487 comm="Wt-8" path="/proc/141487/statm" dev="proc" ino=558948 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.776:26391): avc: denied { getattr } for pid=141487 comm="Wt-8" path="/proc/141487/statm" dev="proc" ino=558948 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.776:26392): avc: denied { read } for pid=141487 comm="Wt-8" name="meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.776:26393): avc: denied { open } for pid=141487 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.776:26394): avc: denied { getattr } for pid=141487 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.776:26395): avc: denied { search } for pid=141487 comm="Wt-8" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.776:26396): avc: denied { search } for pid=141487 comm="Wt-8" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.776:26397): avc: denied { getattr } for pid=141487 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10805 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.776:26398): avc: denied { read } for pid=141487 comm="Wt-8" name="memory.max" dev="cgroup2" ino=10805 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.776:26399): avc: denied { open } for pid=141487 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10805 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.801:26400): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.801:26401): avc: denied { signal } for pid=141382 comm="sqlservr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.801:26403): avc: denied { fork } for pid=141487 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.801:26404): avc: denied { setsched } for pid=141487 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.801:26405): avc: denied { getsched } for pid=141487 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.802:26406): avc: denied { use } for pid=141487 comm="Wt-656" path="socket:[559358]" dev="sockfs" ino=559358 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.802:26407): avc: denied { append } for pid=141487 comm="Wt-656" path="socket:[559358]" dev="sockfs" ino=559358 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.802:26408): avc: denied { write } for pid=141487 comm="Wt-656" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.804:26409): avc: denied { write } for pid=141487 comm="Wt-656" path="/var/opt/mssql/log/errorlog" dev="xvda2" ino=394403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.804:26410): avc: denied { read } for pid=560 comm="systemd-journal" name="status" dev="proc" ino=560496 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.804:26411): avc: denied { open } for pid=560 comm="systemd-journal" path="/proc/141487/status" dev="proc" ino=560496 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.804:26412): avc: denied { getattr } for pid=560 comm="systemd-journal" path="/proc/141487/status" dev="proc" ino=560496 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.804:26413): avc: denied { ioctl } for pid=560 comm="systemd-journal" path="/proc/141487/status" dev="proc" ino=560496 ioctlcmd=0x5401 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.804:26414): avc: denied { read } for pid=560 comm="systemd-journal" name="exe" dev="proc" ino=560635 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.804:26415): avc: denied { getattr } for pid=560 comm="systemd-journal" scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.806:26416): avc: denied { search } for pid=141487 comm="Wt-656" name="var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.806:26417): avc: denied { search } for pid=141487 comm="Wt-656" name="mssql" dev="xvda2" ino=394347 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.806:26418): avc: denied { getattr } for pid=141487 comm="Wt-656" path="/var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.806:26419): avc: denied { getattr } for pid=141487 comm="Wt-656" path="/var/opt/mssql" dev="xvda2" ino=394347 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.806:26420): avc: denied { read } for pid=141487 comm="Wt-656" name="system" dev="xvda2" ino=394354 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.806:26421): avc: denied { open } for pid=141487 comm="Wt-656" path="/var/opt/mssql/.system/system" dev="xvda2" ino=394354 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.806:26422): avc: denied { read } for pid=141487 comm="Wt-656" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.806:26423): avc: denied { open } for pid=141487 comm="Wt-656" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.806:26424): avc: denied { getattr } for pid=141487 comm="Wt-656" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.806:26425): avc: denied { read } for pid=141487 comm="Wt-656" name="sbin" dev="xvda2" ino=807 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.807:26426): avc: denied { search } for pid=141487 comm="Wt-656" name="usr" dev="xvda2" ino=131073 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.807:26427): avc: denied { read } for pid=141487 comm="Wt-656" name="sbin" dev="xvda2" ino=131093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.807:26428): avc: denied { getattr } for pid=141487 comm="Wt-656" path="/usr/sbin" dev="xvda2" ino=131093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.807:26429): avc: denied { read } for pid=141487 comm="Wt-656" name="lib" dev="xvda2" ino=805 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.807:26430): avc: denied { read } for pid=141487 comm="Wt-656" name="lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.807:26431): avc: denied { getattr } for pid=141487 comm="Wt-656" path="/usr/lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.809:26432): avc: denied { write } for pid=141487 comm="Wt-652" path="/var/opt/mssql/data/model_replicatedmaster.ldf" dev="xvda2" ino=394399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.842:26433): avc: denied { lock } for pid=141487 comm="Wt-656" path="/var/opt/mssql/data/model_replicatedmaster.mdf" dev="xvda2" ino=394398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.842:26434): avc: denied { search } for pid=141487 comm="Wt-656" name="etc" dev="xvda2" ino=8193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.842:26435): avc: denied { read } for pid=141487 comm="Wt-656" name="localtime" dev="xvda2" ino=27 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.842:26436): avc: denied { search } for pid=141487 comm="Wt-656" name="zoneinfo" dev="xvda2" ino=131603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.842:26437): avc: denied { getattr } for pid=141487 comm="Wt-656" path="/usr/share/zoneinfo/America/New_York" dev="xvda2" ino=132397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.908:26438): avc: denied { read } for pid=141487 comm="Wt-656" path="/var/opt/mssql/data/modellog.ldf" dev="xvda2" ino=394395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.949:26439): avc: denied { lock } for pid=141487 comm="Wt-656" path="/var/opt/mssql/log/log_7.trc" dev="xvda2" ino=394947 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.966:26440): avc: denied { read } for pid=141487 comm="Wt-540" name="krb5.conf" dev="xvda2" ino=1415 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:39:49 2025 type=AVC msg=audit(1755913189.966:26441): avc: denied { getattr } for pid=141487 comm="Wt-540" path="/etc/krb5.conf" dev="xvda2" ino=1415 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0"