---- time->Fri Aug 29 21:31:16 2025 type=AVC msg=audit(1756517476.062:17777): avc: denied { connectto } for pid=96671 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 29 21:31:16 2025 type=AVC msg=audit(1756517476.090:17778): avc: denied { read } for pid=96679 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 29 21:31:16 2025 type=AVC msg=audit(1756517476.091:17779): avc: denied { read } for pid=96679 comm="systemctl" name="system@7e729bf74372456ea94cad299c04ceed-00000000000009cd-00063d8ae7fb61ab.journal" dev="xvda2" ino=1583 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:16 2025 type=AVC msg=audit(1756517476.091:17780): avc: denied { open } for pid=96679 comm="systemctl" path="/var/log/journal/ec280cf5abab3c09237e2edb860afc93/system@7e729bf74372456ea94cad299c04ceed-00000000000009cd-00063d8ae7fb61ab.journal" dev="xvda2" ino=1583 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:16 2025 type=AVC msg=audit(1756517476.091:17781): avc: denied { map } for pid=96679 comm="systemctl" path="/var/log/journal/ec280cf5abab3c09237e2edb860afc93/system@7e729bf74372456ea94cad299c04ceed-00000000000009cd-00063d8ae7fb61ab.journal" dev="xvda2" ino=1583 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:16 2025 type=AVC msg=audit(1756517476.093:17782): avc: denied { getattr } for pid=96680 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158381 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:16 2025 type=AVC msg=audit(1756517476.093:17783): avc: denied { execute } for pid=96680 comm="sh" name="rpm" dev="xvda2" ino=158381 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:16 2025 type=AVC msg=audit(1756517476.093:17784): avc: denied { read } for pid=96680 comm="sh" name="rpm" dev="xvda2" ino=158381 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:16 2025 type=AVC msg=audit(1756517476.094:17785): avc: denied { open } for pid=96681 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158381 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:16 2025 type=AVC msg=audit(1756517476.094:17786): avc: denied { execute_no_trans } for pid=96681 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158381 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:16 2025 type=AVC msg=audit(1756517476.094:17787): avc: denied { map } for pid=96681 comm="rpm" path="/usr/bin/rpm" dev="xvda2" ino=158381 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:16 2025 type=AVC msg=audit(1756517476.098:17788): avc: denied { search } for pid=96681 comm="rpm" name="rpm" dev="xvda2" ino=131076 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 29 21:31:16 2025 type=AVC msg=audit(1756517476.098:17789): avc: denied { open } for pid=96681 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite" dev="xvda2" ino=131077 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:16 2025 type=AVC msg=audit(1756517476.099:17790): avc: denied { setattr } for pid=96681 comm="rpm" name="rpmdb.sqlite-wal" dev="xvda2" ino=131078 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:16 2025 type=AVC msg=audit(1756517476.099:17791): avc: denied { map } for pid=96681 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite-shm" dev="xvda2" ino=131079 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:23 2025 type=AVC msg=audit(1756517483.182:17798): avc: denied { search } for pid=96893 comm="(sd-askpwagent)" name="fs" dev="proc" ino=3426 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 29 21:31:23 2025 type=AVC msg=audit(1756517483.182:17799): avc: denied { read } for pid=96893 comm="(sd-askpwagent)" name="nr_open" dev="proc" ino=3427 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:23 2025 type=AVC msg=audit(1756517483.182:17800): avc: denied { open } for pid=96893 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=3427 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:23 2025 type=AVC msg=audit(1756517483.182:17801): avc: denied { getattr } for pid=96893 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=3427 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:23 2025 type=AVC msg=audit(1756517483.182:17802): avc: denied { ioctl } for pid=96893 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=3427 ioctlcmd=0x5401 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:31:23 2025 type=AVC msg=audit(1756517483.191:17805): avc: denied { signal } for pid=96892 comm="systemctl" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tclass=process permissive=1 ---- time->Fri Aug 29 21:31:47 2025 type=AVC msg=audit(1756517507.033:18447): avc: denied { connectto } for pid=100862 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 29 21:31:52 2025 type=AVC msg=audit(1756517512.813:18718): avc: denied { name_connect } for pid=102293 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 29 21:32:34 2025 type=AVC msg=audit(1756517554.190:19768): avc: denied { connectto } for pid=108267 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 29 21:32:41 2025 type=AVC msg=audit(1756517561.249:20099): avc: denied { name_connect } for pid=110007 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 29 21:33:20 2025 type=AVC msg=audit(1756517600.750:21285): avc: denied { connectto } for pid=116305 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 29 21:33:27 2025 type=AVC msg=audit(1756517607.437:21616): avc: denied { name_connect } for pid=118045 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 29 21:34:05 2025 type=AVC msg=audit(1756517645.770:22582): avc: denied { connectto } for pid=123309 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 29 21:34:12 2025 type=AVC msg=audit(1756517652.451:22913): avc: denied { name_connect } for pid=125049 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 29 21:35:01 2025 type=AVC msg=audit(1756517701.244:24223): avc: denied { connectto } for pid=131646 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 29 21:35:08 2025 type=AVC msg=audit(1756517708.070:24554): avc: denied { name_connect } for pid=133389 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 29 21:35:46 2025 type=AVC msg=audit(1756517746.718:25489): avc: denied { connectto } for pid=139152 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 29 21:35:53 2025 type=AVC msg=audit(1756517753.632:25820): avc: denied { name_connect } for pid=140892 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.661:26399): avc: denied { fork } for pid=141317 comm="Wt-352" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.661:26400): avc: denied { setsched } for pid=141317 comm="Wt-352" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.661:26401): avc: denied { getsched } for pid=141317 comm="Wt-352" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.902:26402): avc: denied { search } for pid=141317 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.902:26403): avc: denied { search } for pid=141317 comm="Wt-8" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.902:26404): avc: denied { read } for pid=141317 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.902:26405): avc: denied { search } for pid=141317 comm="Wt-8" name="141317" dev="proc" ino=554336 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.902:26406): avc: denied { read } for pid=141317 comm="Wt-8" name="statm" dev="proc" ino=556213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.902:26407): avc: denied { open } for pid=141317 comm="Wt-8" path="/proc/141317/statm" dev="proc" ino=556213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.902:26408): avc: denied { getattr } for pid=141317 comm="Wt-8" path="/proc/141317/statm" dev="proc" ino=556213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.902:26409): avc: denied { read } for pid=141317 comm="Wt-8" name="meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.902:26410): avc: denied { open } for pid=141317 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.902:26411): avc: denied { getattr } for pid=141317 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.902:26412): avc: denied { search } for pid=141317 comm="Wt-8" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.902:26413): avc: denied { search } for pid=141317 comm="Wt-8" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.902:26414): avc: denied { getattr } for pid=141317 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10734 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.902:26415): avc: denied { read } for pid=141317 comm="Wt-8" name="memory.max" dev="cgroup2" ino=10734 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:29 2025 type=AVC msg=audit(1756517789.902:26416): avc: denied { open } for pid=141317 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10734 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.587:26417): avc: denied { search } for pid=141317 comm="sqlservr" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.587:26418): avc: denied { search } for pid=141317 comm="sqlservr" name="var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.587:26419): avc: denied { search } for pid=141317 comm="sqlservr" name="mssql" dev="xvda2" ino=524569 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.902:26421): avc: denied { search } for pid=141317 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.902:26422): avc: denied { search } for pid=141317 comm="Wt-8" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.902:26423): avc: denied { read } for pid=141317 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.902:26424): avc: denied { search } for pid=141317 comm="Wt-8" name="141317" dev="proc" ino=554336 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.902:26425): avc: denied { read } for pid=141317 comm="Wt-8" name="statm" dev="proc" ino=556213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.902:26426): avc: denied { open } for pid=141317 comm="Wt-8" path="/proc/141317/statm" dev="proc" ino=556213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.902:26427): avc: denied { getattr } for pid=141317 comm="Wt-8" path="/proc/141317/statm" dev="proc" ino=556213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.902:26428): avc: denied { read } for pid=141317 comm="Wt-8" name="meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.902:26429): avc: denied { open } for pid=141317 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.902:26430): avc: denied { getattr } for pid=141317 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.902:26431): avc: denied { search } for pid=141317 comm="Wt-8" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.902:26432): avc: denied { search } for pid=141317 comm="Wt-8" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.902:26433): avc: denied { getattr } for pid=141317 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10734 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.902:26434): avc: denied { read } for pid=141317 comm="Wt-8" name="memory.max" dev="cgroup2" ino=10734 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.902:26435): avc: denied { open } for pid=141317 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10734 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.949:26436): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.949:26438): avc: denied { signal } for pid=141212 comm="sqlservr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.949:26439): avc: denied { fork } for pid=141317 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.949:26440): avc: denied { setsched } for pid=141317 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.949:26441): avc: denied { getsched } for pid=141317 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.950:26442): avc: denied { use } for pid=141317 comm="Wt-672" path="socket:[555025]" dev="sockfs" ino=555025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.950:26443): avc: denied { append } for pid=141317 comm="Wt-672" path="socket:[555025]" dev="sockfs" ino=555025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.950:26444): avc: denied { write } for pid=141317 comm="Wt-672" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.952:26445): avc: denied { write } for pid=141317 comm="Wt-672" path="/var/opt/mssql/log/errorlog" dev="xvda2" ino=524625 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.952:26446): avc: denied { read } for pid=561 comm="systemd-journal" name="status" dev="proc" ino=554342 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.952:26447): avc: denied { open } for pid=561 comm="systemd-journal" path="/proc/141317/status" dev="proc" ino=554342 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.952:26448): avc: denied { getattr } for pid=561 comm="systemd-journal" path="/proc/141317/status" dev="proc" ino=554342 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.952:26449): avc: denied { ioctl } for pid=561 comm="systemd-journal" path="/proc/141317/status" dev="proc" ino=554342 ioctlcmd=0x5401 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.952:26450): avc: denied { read } for pid=561 comm="systemd-journal" name="exe" dev="proc" ino=555125 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.952:26451): avc: denied { getattr } for pid=561 comm="systemd-journal" scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26452): avc: denied { search } for pid=141317 comm="Wt-672" name="var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26453): avc: denied { search } for pid=141317 comm="Wt-672" name="mssql" dev="xvda2" ino=524569 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26454): avc: denied { getattr } for pid=141317 comm="Wt-672" path="/var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26455): avc: denied { getattr } for pid=141317 comm="Wt-672" path="/var/opt/mssql" dev="xvda2" ino=524569 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26456): avc: denied { read } for pid=141317 comm="Wt-672" name="system" dev="xvda2" ino=524576 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26457): avc: denied { open } for pid=141317 comm="Wt-672" path="/var/opt/mssql/.system/system" dev="xvda2" ino=524576 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26458): avc: denied { read } for pid=141317 comm="Wt-672" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26459): avc: denied { open } for pid=141317 comm="Wt-672" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26460): avc: denied { getattr } for pid=141317 comm="Wt-672" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26461): avc: denied { read } for pid=141317 comm="Wt-672" name="sbin" dev="xvda2" ino=807 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26462): avc: denied { search } for pid=141317 comm="Wt-672" name="usr" dev="xvda2" ino=131073 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26463): avc: denied { read } for pid=141317 comm="Wt-672" name="sbin" dev="xvda2" ino=131093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26464): avc: denied { getattr } for pid=141317 comm="Wt-672" path="/usr/sbin" dev="xvda2" ino=131093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26465): avc: denied { read } for pid=141317 comm="Wt-672" name="lib" dev="xvda2" ino=805 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26466): avc: denied { read } for pid=141317 comm="Wt-672" name="lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.954:26467): avc: denied { getattr } for pid=141317 comm="Wt-672" path="/usr/lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.957:26468): avc: denied { write } for pid=141317 comm="Wt-664" path="/var/opt/mssql/data/model_replicatedmaster.ldf" dev="xvda2" ino=524621 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.989:26469): avc: denied { lock } for pid=141317 comm="Wt-672" path="/var/opt/mssql/data/model_replicatedmaster.mdf" dev="xvda2" ino=524620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.989:26470): avc: denied { search } for pid=141317 comm="Wt-672" name="etc" dev="xvda2" ino=8193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.989:26471): avc: denied { read } for pid=141317 comm="Wt-672" name="localtime" dev="xvda2" ino=27 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.989:26472): avc: denied { search } for pid=141317 comm="Wt-672" name="zoneinfo" dev="xvda2" ino=131603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:30 2025 type=AVC msg=audit(1756517790.989:26473): avc: denied { getattr } for pid=141317 comm="Wt-672" path="/usr/share/zoneinfo/America/New_York" dev="xvda2" ino=132397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:31 2025 type=AVC msg=audit(1756517791.055:26474): avc: denied { read } for pid=141317 comm="Wt-672" path="/var/opt/mssql/data/modellog.ldf" dev="xvda2" ino=524617 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:31 2025 type=AVC msg=audit(1756517791.094:26475): avc: denied { lock } for pid=141317 comm="Wt-672" path="/var/opt/mssql/log/log_7.trc" dev="xvda2" ino=525154 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:31 2025 type=AVC msg=audit(1756517791.111:26476): avc: denied { read } for pid=141317 comm="Wt-548" name="krb5.conf" dev="xvda2" ino=1415 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:36:31 2025 type=AVC msg=audit(1756517791.111:26477): avc: denied { getattr } for pid=141317 comm="Wt-548" path="/etc/krb5.conf" dev="xvda2" ino=1415 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0"