---- time->Wed Aug 6 11:49:01 2025 type=AVC msg=audit(1754495341.512:17783): avc: denied { connectto } for pid=95745 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 11:49:01 2025 type=AVC msg=audit(1754495341.542:17784): avc: denied { read } for pid=95753 comm="systemctl" name="journal" dev="xvda2" ino=1489 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=1 ---- time->Wed Aug 6 11:49:01 2025 type=AVC msg=audit(1754495341.542:17785): avc: denied { read } for pid=95753 comm="systemctl" name="system@16b81db21dd245e09a9b9ca7ce42e7c7-0000000000000001-00063bb403d994f8.journal" dev="xvda2" ino=66 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:01 2025 type=AVC msg=audit(1754495341.542:17786): avc: denied { open } for pid=95753 comm="systemctl" path="/var/log/journal/ec2223a67bcdba9a8ad63ed3e68d1305/system@16b81db21dd245e09a9b9ca7ce42e7c7-0000000000000001-00063bb403d994f8.journal" dev="xvda2" ino=66 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:01 2025 type=AVC msg=audit(1754495341.542:17787): avc: denied { map } for pid=95753 comm="systemctl" path="/var/log/journal/ec2223a67bcdba9a8ad63ed3e68d1305/system@16b81db21dd245e09a9b9ca7ce42e7c7-0000000000000001-00063bb403d994f8.journal" dev="xvda2" ino=66 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:01 2025 type=AVC msg=audit(1754495341.546:17788): avc: denied { getattr } for pid=95754 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:01 2025 type=AVC msg=audit(1754495341.546:17789): avc: denied { execute } for pid=95754 comm="sh" name="rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:01 2025 type=AVC msg=audit(1754495341.546:17790): avc: denied { read } for pid=95754 comm="sh" name="rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:01 2025 type=AVC msg=audit(1754495341.546:17791): avc: denied { open } for pid=95755 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:01 2025 type=AVC msg=audit(1754495341.546:17792): avc: denied { execute_no_trans } for pid=95755 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:01 2025 type=AVC msg=audit(1754495341.546:17793): avc: denied { map } for pid=95755 comm="rpm" path="/usr/bin/rpm" dev="xvda2" ino=158373 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:01 2025 type=AVC msg=audit(1754495341.551:17794): avc: denied { search } for pid=95755 comm="rpm" name="rpm" dev="xvda2" ino=131076 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir permissive=1 ---- time->Wed Aug 6 11:49:01 2025 type=AVC msg=audit(1754495341.551:17795): avc: denied { open } for pid=95755 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite" dev="xvda2" ino=131077 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:01 2025 type=AVC msg=audit(1754495341.551:17796): avc: denied { setattr } for pid=95755 comm="rpm" name="rpmdb.sqlite-wal" dev="xvda2" ino=131078 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:01 2025 type=AVC msg=audit(1754495341.551:17797): avc: denied { map } for pid=95755 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite-shm" dev="xvda2" ino=131079 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:08 2025 type=AVC msg=audit(1754495348.882:17804): avc: denied { search } for pid=95967 comm="(sd-askpwagent)" name="fs" dev="proc" ino=4133 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 ---- time->Wed Aug 6 11:49:08 2025 type=AVC msg=audit(1754495348.882:17805): avc: denied { read } for pid=95967 comm="(sd-askpwagent)" name="nr_open" dev="proc" ino=4134 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:08 2025 type=AVC msg=audit(1754495348.882:17806): avc: denied { open } for pid=95967 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=4134 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:08 2025 type=AVC msg=audit(1754495348.882:17807): avc: denied { getattr } for pid=95967 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=4134 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:08 2025 type=AVC msg=audit(1754495348.882:17808): avc: denied { ioctl } for pid=95967 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=4134 ioctlcmd=0x5401 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 11:49:08 2025 type=AVC msg=audit(1754495348.891:17811): avc: denied { signal } for pid=95966 comm="systemctl" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tclass=process permissive=1 ---- time->Wed Aug 6 11:49:37 2025 type=AVC msg=audit(1754495377.596:18453): avc: denied { connectto } for pid=99668 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 11:49:44 2025 type=AVC msg=audit(1754495384.093:18724): avc: denied { name_connect } for pid=101101 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 11:50:27 2025 type=AVC msg=audit(1754495427.814:19774): avc: denied { connectto } for pid=106852 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 11:50:35 2025 type=AVC msg=audit(1754495435.447:20105): avc: denied { name_connect } for pid=108592 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 11:51:18 2025 type=AVC msg=audit(1754495478.005:21291): avc: denied { connectto } for pid=114788 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 11:51:25 2025 type=AVC msg=audit(1754495485.547:21622): avc: denied { name_connect } for pid=116528 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 11:52:03 2025 type=AVC msg=audit(1754495523.797:22588): avc: denied { connectto } for pid=121789 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 11:52:10 2025 type=AVC msg=audit(1754495530.709:22919): avc: denied { name_connect } for pid=123530 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 11:52:59 2025 type=AVC msg=audit(1754495579.980:24229): avc: denied { connectto } for pid=130228 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 11:53:06 2025 type=AVC msg=audit(1754495586.773:24560): avc: denied { name_connect } for pid=131971 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 11:53:45 2025 type=AVC msg=audit(1754495625.191:25495): avc: denied { connectto } for pid=137694 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 11:53:52 2025 type=AVC msg=audit(1754495632.102:25826): avc: denied { name_connect } for pid=139435 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.371:26405): avc: denied { fork } for pid=139861 comm="Wt-348" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.371:26406): avc: denied { setsched } for pid=139861 comm="Wt-348" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.371:26407): avc: denied { getsched } for pid=139861 comm="Wt-348" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.650:26408): avc: denied { search } for pid=139861 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.651:26409): avc: denied { search } for pid=139861 comm="Wt-8" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.651:26410): avc: denied { read } for pid=139861 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.651:26411): avc: denied { search } for pid=139861 comm="Wt-8" name="139861" dev="proc" ino=550032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.651:26412): avc: denied { read } for pid=139861 comm="Wt-8" name="statm" dev="proc" ino=551198 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.651:26413): avc: denied { open } for pid=139861 comm="Wt-8" path="/proc/139861/statm" dev="proc" ino=551198 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.651:26414): avc: denied { getattr } for pid=139861 comm="Wt-8" path="/proc/139861/statm" dev="proc" ino=551198 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.651:26415): avc: denied { read } for pid=139861 comm="Wt-8" name="meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.651:26416): avc: denied { open } for pid=139861 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.651:26417): avc: denied { getattr } for pid=139861 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.651:26418): avc: denied { search } for pid=139861 comm="Wt-8" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.651:26419): avc: denied { search } for pid=139861 comm="Wt-8" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.651:26420): avc: denied { getattr } for pid=139861 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=11190 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.651:26421): avc: denied { read } for pid=139861 comm="Wt-8" name="memory.max" dev="cgroup2" ino=11190 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:28 2025 type=AVC msg=audit(1754495668.651:26422): avc: denied { open } for pid=139861 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=11190 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.310:26424): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.310:26425): avc: denied { signal } for pid=139755 comm="sqlservr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.310:26427): avc: denied { fork } for pid=139861 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.310:26428): avc: denied { setsched } for pid=139861 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.310:26429): avc: denied { getsched } for pid=139861 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.311:26430): avc: denied { use } for pid=139861 comm="Wt-672" path="socket:[548682]" dev="sockfs" ino=548682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.311:26431): avc: denied { append } for pid=139861 comm="Wt-672" path="socket:[548682]" dev="sockfs" ino=548682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.311:26432): avc: denied { write } for pid=139861 comm="Wt-672" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.313:26433): avc: denied { read } for pid=559 comm="systemd-journal" name="status" dev="proc" ino=548700 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.313:26434): avc: denied { write } for pid=139861 comm="Wt-672" path="/var/opt/mssql/log/errorlog" dev="xvda2" ino=394548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.313:26435): avc: denied { open } for pid=559 comm="systemd-journal" path="/proc/139861/status" dev="proc" ino=548700 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.313:26436): avc: denied { getattr } for pid=559 comm="systemd-journal" path="/proc/139861/status" dev="proc" ino=548700 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.313:26437): avc: denied { ioctl } for pid=559 comm="systemd-journal" path="/proc/139861/status" dev="proc" ino=548700 ioctlcmd=0x5401 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.313:26438): avc: denied { read } for pid=559 comm="systemd-journal" name="exe" dev="proc" ino=551995 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.313:26439): avc: denied { getattr } for pid=559 comm="systemd-journal" scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26440): avc: denied { search } for pid=139861 comm="Wt-672" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26441): avc: denied { search } for pid=139861 comm="Wt-672" name="var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26442): avc: denied { search } for pid=139861 comm="Wt-672" name="mssql" dev="xvda2" ino=394485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26443): avc: denied { getattr } for pid=139861 comm="Wt-672" path="/var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26444): avc: denied { getattr } for pid=139861 comm="Wt-672" path="/var/opt/mssql" dev="xvda2" ino=394485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26445): avc: denied { read } for pid=139861 comm="Wt-672" name="system" dev="xvda2" ino=394492 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26446): avc: denied { open } for pid=139861 comm="Wt-672" path="/var/opt/mssql/.system/system" dev="xvda2" ino=394492 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26447): avc: denied { read } for pid=139861 comm="Wt-672" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26448): avc: denied { open } for pid=139861 comm="Wt-672" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26449): avc: denied { getattr } for pid=139861 comm="Wt-672" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26450): avc: denied { read } for pid=139861 comm="Wt-672" name="bin" dev="xvda2" ino=786 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26451): avc: denied { search } for pid=139861 comm="Wt-672" name="usr" dev="xvda2" ino=131073 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26452): avc: denied { read } for pid=139861 comm="Wt-672" name="bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26453): avc: denied { getattr } for pid=139861 comm="Wt-672" path="/usr/bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26454): avc: denied { read } for pid=139861 comm="Wt-672" name="lib" dev="xvda2" ino=805 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26455): avc: denied { read } for pid=139861 comm="Wt-672" name="lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.315:26456): avc: denied { getattr } for pid=139861 comm="Wt-672" path="/usr/lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.319:26457): avc: denied { write } for pid=139861 comm="Wt-668" path="/var/opt/mssql/data/model_replicatedmaster.ldf" dev="xvda2" ino=394543 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.351:26458): avc: denied { lock } for pid=139861 comm="Wt-672" path="/var/opt/mssql/data/model_replicatedmaster.mdf" dev="xvda2" ino=394542 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.351:26459): avc: denied { search } for pid=139861 comm="Wt-672" name="etc" dev="xvda2" ino=8193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.351:26460): avc: denied { read } for pid=139861 comm="Wt-672" name="localtime" dev="xvda2" ino=27 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.351:26461): avc: denied { search } for pid=139861 comm="Wt-672" name="zoneinfo" dev="xvda2" ino=131603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.351:26462): avc: denied { getattr } for pid=139861 comm="Wt-672" path="/usr/share/zoneinfo/America/New_York" dev="xvda2" ino=132397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.420:26463): avc: denied { read } for pid=139861 comm="Wt-672" path="/var/opt/mssql/data/modellog.ldf" dev="xvda2" ino=394538 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.461:26464): avc: denied { lock } for pid=139861 comm="Wt-672" path="/var/opt/mssql/log/log_7.trc" dev="xvda2" ino=395087 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.476:26465): avc: denied { read } for pid=139861 comm="Wt-544" name="krb5.conf" dev="xvda2" ino=1415 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 11:54:29 2025 type=AVC msg=audit(1754495669.476:26466): avc: denied { getattr } for pid=139861 comm="Wt-544" path="/etc/krb5.conf" dev="xvda2" ino=1415 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0"