---- time->Wed Aug 6 09:27:48 2025 type=AVC msg=audit(1754486868.235:17821): avc: denied { connectto } for pid=97432 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 09:27:48 2025 type=AVC msg=audit(1754486868.264:17822): avc: denied { read } for pid=97440 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=1 ---- time->Wed Aug 6 09:27:48 2025 type=AVC msg=audit(1754486868.264:17823): avc: denied { read } for pid=97440 comm="systemctl" name="system@6a2c1ead0492493d99d817ec0197d58b-0000000000004154-00063bb24057c7d6.journal" dev="xvda2" ino=1647 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:48 2025 type=AVC msg=audit(1754486868.264:17824): avc: denied { open } for pid=97440 comm="systemctl" path="/var/log/journal/ec20a11bf8c83f851e615d78a0c9dbe0/system@6a2c1ead0492493d99d817ec0197d58b-0000000000004154-00063bb24057c7d6.journal" dev="xvda2" ino=1647 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:48 2025 type=AVC msg=audit(1754486868.264:17825): avc: denied { map } for pid=97440 comm="systemctl" path="/var/log/journal/ec20a11bf8c83f851e615d78a0c9dbe0/system@6a2c1ead0492493d99d817ec0197d58b-0000000000004154-00063bb24057c7d6.journal" dev="xvda2" ino=1647 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:48 2025 type=AVC msg=audit(1754486868.267:17826): avc: denied { getattr } for pid=97441 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:48 2025 type=AVC msg=audit(1754486868.267:17827): avc: denied { execute } for pid=97441 comm="sh" name="rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:48 2025 type=AVC msg=audit(1754486868.267:17828): avc: denied { read } for pid=97441 comm="sh" name="rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:48 2025 type=AVC msg=audit(1754486868.268:17829): avc: denied { open } for pid=97442 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:48 2025 type=AVC msg=audit(1754486868.268:17830): avc: denied { execute_no_trans } for pid=97442 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:48 2025 type=AVC msg=audit(1754486868.268:17831): avc: denied { map } for pid=97442 comm="rpm" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:48 2025 type=AVC msg=audit(1754486868.272:17832): avc: denied { search } for pid=97442 comm="rpm" name="rpm" dev="xvda2" ino=131076 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir permissive=1 ---- time->Wed Aug 6 09:27:48 2025 type=AVC msg=audit(1754486868.272:17833): avc: denied { open } for pid=97442 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite" dev="xvda2" ino=131077 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:48 2025 type=AVC msg=audit(1754486868.273:17834): avc: denied { setattr } for pid=97442 comm="rpm" name="rpmdb.sqlite-wal" dev="xvda2" ino=131078 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:48 2025 type=AVC msg=audit(1754486868.273:17835): avc: denied { map } for pid=97442 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite-shm" dev="xvda2" ino=131079 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:55 2025 type=AVC msg=audit(1754486875.589:17842): avc: denied { search } for pid=97653 comm="(sd-askpwagent)" name="fs" dev="proc" ino=1482 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 ---- time->Wed Aug 6 09:27:55 2025 type=AVC msg=audit(1754486875.589:17843): avc: denied { read } for pid=97653 comm="(sd-askpwagent)" name="nr_open" dev="proc" ino=1483 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:55 2025 type=AVC msg=audit(1754486875.589:17844): avc: denied { open } for pid=97653 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=1483 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:55 2025 type=AVC msg=audit(1754486875.589:17845): avc: denied { getattr } for pid=97653 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=1483 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:55 2025 type=AVC msg=audit(1754486875.589:17846): avc: denied { ioctl } for pid=97653 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=1483 ioctlcmd=0x5401 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 09:27:55 2025 type=AVC msg=audit(1754486875.596:17849): avc: denied { signal } for pid=97652 comm="systemctl" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tclass=process permissive=1 ---- time->Wed Aug 6 09:28:18 2025 type=AVC msg=audit(1754486898.925:18491): avc: denied { connectto } for pid=101198 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 09:28:24 2025 type=AVC msg=audit(1754486904.659:18762): avc: denied { name_connect } for pid=102629 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 09:29:06 2025 type=AVC msg=audit(1754486946.424:19812): avc: denied { connectto } for pid=108818 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 09:29:13 2025 type=AVC msg=audit(1754486953.311:20143): avc: denied { name_connect } for pid=110558 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 09:29:54 2025 type=AVC msg=audit(1754486994.361:21329): avc: denied { connectto } for pid=116758 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 09:30:01 2025 type=AVC msg=audit(1754487001.051:21660): avc: denied { name_connect } for pid=118498 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 09:30:39 2025 type=AVC msg=audit(1754487039.648:22626): avc: denied { connectto } for pid=123763 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 09:30:46 2025 type=AVC msg=audit(1754487046.373:22957): avc: denied { name_connect } for pid=125504 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 09:31:34 2025 type=AVC msg=audit(1754487094.455:24267): avc: denied { connectto } for pid=132098 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 09:31:41 2025 type=AVC msg=audit(1754487101.253:24598): avc: denied { name_connect } for pid=133840 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 09:32:19 2025 type=AVC msg=audit(1754487139.580:25533): avc: denied { connectto } for pid=139568 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 09:32:26 2025 type=AVC msg=audit(1754487146.391:25864): avc: denied { name_connect } for pid=141310 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.260:26443): avc: denied { fork } for pid=141736 comm="Wt-344" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.260:26444): avc: denied { setsched } for pid=141736 comm="Wt-344" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.260:26445): avc: denied { getsched } for pid=141736 comm="Wt-344" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.499:26446): avc: denied { search } for pid=141736 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.499:26447): avc: denied { search } for pid=141736 comm="Wt-8" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.499:26448): avc: denied { read } for pid=141736 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.499:26449): avc: denied { search } for pid=141736 comm="Wt-8" name="141736" dev="proc" ino=560919 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.499:26450): avc: denied { read } for pid=141736 comm="Wt-8" name="statm" dev="proc" ino=562391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.499:26451): avc: denied { open } for pid=141736 comm="Wt-8" path="/proc/141736/statm" dev="proc" ino=562391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.499:26452): avc: denied { getattr } for pid=141736 comm="Wt-8" path="/proc/141736/statm" dev="proc" ino=562391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.499:26453): avc: denied { read } for pid=141736 comm="Wt-8" name="meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.499:26454): avc: denied { open } for pid=141736 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.499:26455): avc: denied { getattr } for pid=141736 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.500:26456): avc: denied { search } for pid=141736 comm="Wt-8" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.500:26457): avc: denied { search } for pid=141736 comm="Wt-8" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.500:26458): avc: denied { getattr } for pid=141736 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=11184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.500:26459): avc: denied { read } for pid=141736 comm="Wt-8" name="memory.max" dev="cgroup2" ino=11184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:02 2025 type=AVC msg=audit(1754487182.500:26460): avc: denied { open } for pid=141736 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=11184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.189:26462): avc: denied { search } for pid=141736 comm="sqlservr" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.189:26463): avc: denied { search } for pid=141736 comm="sqlservr" name="var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.189:26464): avc: denied { search } for pid=141736 comm="sqlservr" name="mssql" dev="xvda2" ino=394347 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.263:26465): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.263:26466): avc: denied { signal } for pid=141631 comm="sqlservr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.263:26468): avc: denied { fork } for pid=141736 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.263:26469): avc: denied { setsched } for pid=141736 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.264:26470): avc: denied { getsched } for pid=141736 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.264:26471): avc: denied { use } for pid=141736 comm="Wt-632" path="socket:[560002]" dev="sockfs" ino=560002 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.264:26472): avc: denied { append } for pid=141736 comm="Wt-632" path="socket:[560002]" dev="sockfs" ino=560002 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.264:26473): avc: denied { write } for pid=141736 comm="Wt-632" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.267:26474): avc: denied { write } for pid=141736 comm="Wt-632" path="/var/opt/mssql/log/errorlog" dev="xvda2" ino=394403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.267:26475): avc: denied { read } for pid=558 comm="systemd-journal" name="status" dev="proc" ino=561536 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.267:26476): avc: denied { open } for pid=558 comm="systemd-journal" path="/proc/141736/status" dev="proc" ino=561536 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.267:26477): avc: denied { getattr } for pid=558 comm="systemd-journal" path="/proc/141736/status" dev="proc" ino=561536 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.267:26478): avc: denied { ioctl } for pid=558 comm="systemd-journal" path="/proc/141736/status" dev="proc" ino=561536 ioctlcmd=0x5401 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.267:26479): avc: denied { read } for pid=558 comm="systemd-journal" name="exe" dev="proc" ino=562393 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.267:26480): avc: denied { getattr } for pid=558 comm="systemd-journal" scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.270:26481): avc: denied { getattr } for pid=141736 comm="Wt-632" path="/var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.270:26482): avc: denied { getattr } for pid=141736 comm="Wt-632" path="/var/opt/mssql" dev="xvda2" ino=394347 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.270:26483): avc: denied { read } for pid=141736 comm="Wt-632" name="system" dev="xvda2" ino=394354 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.270:26484): avc: denied { open } for pid=141736 comm="Wt-632" path="/var/opt/mssql/.system/system" dev="xvda2" ino=394354 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.270:26485): avc: denied { read } for pid=141736 comm="Wt-632" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.270:26486): avc: denied { open } for pid=141736 comm="Wt-632" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.270:26487): avc: denied { getattr } for pid=141736 comm="Wt-632" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.270:26488): avc: denied { read } for pid=141736 comm="Wt-632" name="bin" dev="xvda2" ino=786 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.270:26489): avc: denied { search } for pid=141736 comm="Wt-632" name="usr" dev="xvda2" ino=131073 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.270:26490): avc: denied { read } for pid=141736 comm="Wt-632" name="bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.270:26491): avc: denied { getattr } for pid=141736 comm="Wt-632" path="/usr/bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.270:26492): avc: denied { read } for pid=141736 comm="Wt-632" name="lib" dev="xvda2" ino=805 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.271:26493): avc: denied { read } for pid=141736 comm="Wt-632" name="lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.271:26494): avc: denied { getattr } for pid=141736 comm="Wt-632" path="/usr/lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.274:26495): avc: denied { write } for pid=141736 comm="Wt-652" path="/var/opt/mssql/data/model_replicatedmaster.ldf" dev="xvda2" ino=394399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.305:26496): avc: denied { lock } for pid=141736 comm="Wt-632" path="/var/opt/mssql/data/model_replicatedmaster.mdf" dev="xvda2" ino=394398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.305:26497): avc: denied { search } for pid=141736 comm="Wt-632" name="etc" dev="xvda2" ino=8193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.305:26498): avc: denied { read } for pid=141736 comm="Wt-632" name="localtime" dev="xvda2" ino=27 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.305:26499): avc: denied { search } for pid=141736 comm="Wt-632" name="zoneinfo" dev="xvda2" ino=131603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.305:26500): avc: denied { getattr } for pid=141736 comm="Wt-632" path="/usr/share/zoneinfo/America/New_York" dev="xvda2" ino=132397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.373:26501): avc: denied { read } for pid=141736 comm="Wt-632" path="/var/opt/mssql/data/modellog.ldf" dev="xvda2" ino=394395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.414:26502): avc: denied { lock } for pid=141736 comm="Wt-632" path="/var/opt/mssql/log/log_7.trc" dev="xvda2" ino=394947 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.431:26503): avc: denied { read } for pid=141736 comm="Wt-536" name="krb5.conf" dev="xvda2" ino=1415 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 09:33:03 2025 type=AVC msg=audit(1754487183.431:26504): avc: denied { getattr } for pid=141736 comm="Wt-536" path="/etc/krb5.conf" dev="xvda2" ino=1415 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0"