---- time->Fri Aug 22 21:33:41 2025 type=AVC msg=audit(1755912821.627:17335): avc: denied { connectto } for pid=95652 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:33:41 2025 type=AVC msg=audit(1755912821.654:17336): avc: denied { read } for pid=95660 comm="systemctl" name="journal" dev="xvda2" ino=1805 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 22 21:33:41 2025 type=AVC msg=audit(1755912821.654:17337): avc: denied { read } for pid=95660 comm="systemctl" name="system@fee82fd1b15e414eaf0c41ffb6f2b119-0000000000000001-00063cfe12811e28.journal" dev="xvda2" ino=63 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:41 2025 type=AVC msg=audit(1755912821.654:17338): avc: denied { open } for pid=95660 comm="systemctl" path="/var/log/journal/ec2c24316ad9fdb1e5a5d0b6d1142865/system@fee82fd1b15e414eaf0c41ffb6f2b119-0000000000000001-00063cfe12811e28.journal" dev="xvda2" ino=63 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:41 2025 type=AVC msg=audit(1755912821.654:17339): avc: denied { map } for pid=95660 comm="systemctl" path="/var/log/journal/ec2c24316ad9fdb1e5a5d0b6d1142865/system@fee82fd1b15e414eaf0c41ffb6f2b119-0000000000000001-00063cfe12811e28.journal" dev="xvda2" ino=63 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:41 2025 type=AVC msg=audit(1755912821.657:17340): avc: denied { getattr } for pid=95661 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158610 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:41 2025 type=AVC msg=audit(1755912821.657:17341): avc: denied { execute } for pid=95661 comm="sh" name="rpm" dev="xvda2" ino=158610 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:41 2025 type=AVC msg=audit(1755912821.657:17342): avc: denied { read } for pid=95661 comm="sh" name="rpm" dev="xvda2" ino=158610 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:41 2025 type=AVC msg=audit(1755912821.658:17343): avc: denied { open } for pid=95662 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158610 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:41 2025 type=AVC msg=audit(1755912821.658:17344): avc: denied { execute_no_trans } for pid=95662 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158610 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:41 2025 type=AVC msg=audit(1755912821.658:17345): avc: denied { map } for pid=95662 comm="rpm" path="/usr/bin/rpm" dev="xvda2" ino=158610 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:41 2025 type=AVC msg=audit(1755912821.662:17346): avc: denied { search } for pid=95662 comm="rpm" name="rpm" dev="xvda2" ino=131076 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 22 21:33:41 2025 type=AVC msg=audit(1755912821.662:17347): avc: denied { open } for pid=95662 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite" dev="xvda2" ino=131077 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:41 2025 type=AVC msg=audit(1755912821.662:17348): avc: denied { setattr } for pid=95662 comm="rpm" name="rpmdb.sqlite-wal" dev="xvda2" ino=131078 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:41 2025 type=AVC msg=audit(1755912821.662:17349): avc: denied { map } for pid=95662 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite-shm" dev="xvda2" ino=131079 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:48 2025 type=AVC msg=audit(1755912828.346:17356): avc: denied { search } for pid=95874 comm="(sd-askpwagent)" name="fs" dev="proc" ino=4562 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 22 21:33:48 2025 type=AVC msg=audit(1755912828.346:17357): avc: denied { read } for pid=95874 comm="(sd-askpwagent)" name="nr_open" dev="proc" ino=4563 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:48 2025 type=AVC msg=audit(1755912828.346:17358): avc: denied { open } for pid=95874 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=4563 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:48 2025 type=AVC msg=audit(1755912828.346:17359): avc: denied { getattr } for pid=95874 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=4563 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:48 2025 type=AVC msg=audit(1755912828.346:17360): avc: denied { ioctl } for pid=95874 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=4563 ioctlcmd=0x5401 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 22 21:33:48 2025 type=AVC msg=audit(1755912828.350:17362): avc: denied { read } for pid=95874 comm="systemd-tty-ask" name="ask-password" dev="tmpfs" ino=22 scontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 22 21:33:48 2025 type=AVC msg=audit(1755912828.350:17363): avc: denied { watch } for pid=95874 comm="systemd-tty-ask" path="/run/user/0/systemd/ask-password" dev="tmpfs" ino=22 scontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 22 21:33:48 2025 type=AVC msg=audit(1755912828.353:17365): avc: denied { signal } for pid=95873 comm="systemctl" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tclass=process permissive=1 ---- time->Fri Aug 22 21:34:10 2025 type=AVC msg=audit(1755912850.673:17995): avc: denied { connectto } for pid=99737 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:34:11 2025 type=AVC msg=audit(1755912851.912:18056): avc: denied { connectto } for pid=100055 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:34:16 2025 type=AVC msg=audit(1755912856.586:18267): avc: denied { name_connect } for pid=101165 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 22 21:34:54 2025 type=AVC msg=audit(1755912894.276:19317): avc: denied { connectto } for pid=107430 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:35:01 2025 type=AVC msg=audit(1755912901.443:19648): avc: denied { name_connect } for pid=109172 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 22 21:35:38 2025 type=AVC msg=audit(1755912938.312:20826): avc: denied { connectto } for pid=115352 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:35:45 2025 type=AVC msg=audit(1755912945.248:21157): avc: denied { name_connect } for pid=117093 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 22 21:36:19 2025 type=AVC msg=audit(1755912979.322:22123): avc: denied { connectto } for pid=122426 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:36:26 2025 type=AVC msg=audit(1755912986.194:22454): avc: denied { name_connect } for pid=124170 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 22 21:37:09 2025 type=AVC msg=audit(1755913029.263:23732): avc: denied { connectto } for pid=130766 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:37:16 2025 type=AVC msg=audit(1755913036.225:24063): avc: denied { name_connect } for pid=132506 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 22 21:37:50 2025 type=AVC msg=audit(1755913070.492:24998): avc: denied { connectto } for pid=137931 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 22 21:37:57 2025 type=AVC msg=audit(1755913077.410:25329): avc: denied { name_connect } for pid=139674 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 22 21:38:30 2025 type=AVC msg=audit(1755913110.472:25907): avc: denied { search } for pid=140151 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:30 2025 type=AVC msg=audit(1755913110.472:25908): avc: denied { search } for pid=140151 comm="Wt-8" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:30 2025 type=AVC msg=audit(1755913110.472:25909): avc: denied { read } for pid=140151 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:30 2025 type=AVC msg=audit(1755913110.472:25910): avc: denied { search } for pid=140151 comm="Wt-8" name="140151" dev="proc" ino=550098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:30 2025 type=AVC msg=audit(1755913110.472:25911): avc: denied { read } for pid=140151 comm="Wt-8" name="statm" dev="proc" ino=551082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:30 2025 type=AVC msg=audit(1755913110.472:25912): avc: denied { open } for pid=140151 comm="Wt-8" path="/proc/140151/statm" dev="proc" ino=551082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:30 2025 type=AVC msg=audit(1755913110.472:25913): avc: denied { getattr } for pid=140151 comm="Wt-8" path="/proc/140151/statm" dev="proc" ino=551082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:30 2025 type=AVC msg=audit(1755913110.472:25914): avc: denied { read } for pid=140151 comm="Wt-8" name="meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:30 2025 type=AVC msg=audit(1755913110.472:25915): avc: denied { open } for pid=140151 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:30 2025 type=AVC msg=audit(1755913110.472:25916): avc: denied { getattr } for pid=140151 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:30 2025 type=AVC msg=audit(1755913110.472:25917): avc: denied { search } for pid=140151 comm="Wt-8" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:30 2025 type=AVC msg=audit(1755913110.472:25918): avc: denied { search } for pid=140151 comm="Wt-8" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:30 2025 type=AVC msg=audit(1755913110.472:25919): avc: denied { getattr } for pid=140151 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:30 2025 type=AVC msg=audit(1755913110.472:25920): avc: denied { read } for pid=140151 comm="Wt-8" name="memory.max" dev="cgroup2" ino=10728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:30 2025 type=AVC msg=audit(1755913110.472:25921): avc: denied { open } for pid=140151 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.118:25923): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.118:25925): avc: denied { signal } for pid=139994 comm="sqlservr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.118:25926): avc: denied { fork } for pid=140151 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.118:25927): avc: denied { setsched } for pid=140151 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.119:25928): avc: denied { getsched } for pid=140151 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.120:25929): avc: denied { use } for pid=140151 comm="Wt-380" path="socket:[547658]" dev="sockfs" ino=547658 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.120:25930): avc: denied { append } for pid=140151 comm="Wt-380" path="socket:[547658]" dev="sockfs" ino=547658 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.120:25931): avc: denied { write } for pid=140151 comm="Wt-380" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.122:25932): avc: denied { write } for pid=140151 comm="Wt-380" path="/var/opt/mssql/log/errorlog" dev="xvda2" ino=394277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.122:25933): avc: denied { read } for pid=656 comm="systemd-journal" name="status" dev="proc" ino=548862 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.122:25934): avc: denied { open } for pid=656 comm="systemd-journal" path="/proc/140151/status" dev="proc" ino=548862 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.122:25935): avc: denied { getattr } for pid=656 comm="systemd-journal" path="/proc/140151/status" dev="proc" ino=548862 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.122:25936): avc: denied { ioctl } for pid=656 comm="systemd-journal" path="/proc/140151/status" dev="proc" ino=548862 ioctlcmd=0x5401 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.122:25937): avc: denied { read } for pid=656 comm="systemd-journal" name="exe" dev="proc" ino=551320 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.122:25938): avc: denied { getattr } for pid=656 comm="systemd-journal" scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25939): avc: denied { search } for pid=140151 comm="Wt-380" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25940): avc: denied { search } for pid=140151 comm="Wt-380" name="var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25941): avc: denied { search } for pid=140151 comm="Wt-380" name="mssql" dev="xvda2" ino=394486 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25942): avc: denied { getattr } for pid=140151 comm="Wt-380" path="/var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25943): avc: denied { getattr } for pid=140151 comm="Wt-380" path="/var/opt/mssql" dev="xvda2" ino=394486 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25944): avc: denied { read } for pid=140151 comm="Wt-380" name="system" dev="xvda2" ino=394206 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25945): avc: denied { open } for pid=140151 comm="Wt-380" path="/var/opt/mssql/.system/system" dev="xvda2" ino=394206 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25946): avc: denied { read } for pid=140151 comm="Wt-380" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25947): avc: denied { open } for pid=140151 comm="Wt-380" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25948): avc: denied { getattr } for pid=140151 comm="Wt-380" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25949): avc: denied { read } for pid=140151 comm="Wt-380" name="bin" dev="xvda2" ino=769 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25950): avc: denied { search } for pid=140151 comm="Wt-380" name="usr" dev="xvda2" ino=131073 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25951): avc: denied { read } for pid=140151 comm="Wt-380" name="bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25952): avc: denied { getattr } for pid=140151 comm="Wt-380" path="/usr/bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25953): avc: denied { read } for pid=140151 comm="Wt-380" name="lib" dev="xvda2" ino=821 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25954): avc: denied { read } for pid=140151 comm="Wt-380" name="lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.125:25955): avc: denied { getattr } for pid=140151 comm="Wt-380" path="/usr/lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.127:25956): avc: denied { write } for pid=140151 comm="Wt-328" path="/var/opt/mssql/data/model_replicatedmaster.ldf" dev="xvda2" ino=394273 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.158:25957): avc: denied { lock } for pid=140151 comm="Wt-380" path="/var/opt/mssql/data/model_replicatedmaster.mdf" dev="xvda2" ino=394272 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.158:25958): avc: denied { search } for pid=140151 comm="Wt-380" name="etc" dev="xvda2" ino=8193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.158:25959): avc: denied { read } for pid=140151 comm="Wt-380" name="localtime" dev="xvda2" ino=27 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.158:25960): avc: denied { search } for pid=140151 comm="Wt-380" name="zoneinfo" dev="xvda2" ino=131602 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.158:25961): avc: denied { getattr } for pid=140151 comm="Wt-380" path="/usr/share/zoneinfo/America/New_York" dev="xvda2" ino=132396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.227:25962): avc: denied { read } for pid=140151 comm="Wt-380" path="/var/opt/mssql/data/modellog.ldf" dev="xvda2" ino=394267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.268:25963): avc: denied { lock } for pid=140151 comm="Wt-380" path="/var/opt/mssql/log/log_7.trc" dev="xvda2" ino=394305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.285:25964): avc: denied { read } for pid=140151 comm="Wt-932" name="krb5.conf" dev="xvda2" ino=1723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 22 21:38:31 2025 type=AVC msg=audit(1755913111.285:25965): avc: denied { getattr } for pid=140151 comm="Wt-932" path="/etc/krb5.conf" dev="xvda2" ino=1723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0"