---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.532:17345): avc: denied { connectto } for pid=96954 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.559:17346): avc: denied { read } for pid=96962 comm="systemctl" name="journal" dev="xvda2" ino=1805 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=1 ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.560:17347): avc: denied { read } for pid=96962 comm="systemctl" name="system@2eaddb6aaf654c54ba64f94f957d9abc-000000000000098a-00063bb84f6fffd8.journal" dev="xvda2" ino=375 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.560:17348): avc: denied { open } for pid=96962 comm="systemctl" path="/var/log/journal/ec29a1211a6f237d1f152d0c2da78887/system@2eaddb6aaf654c54ba64f94f957d9abc-000000000000098a-00063bb84f6fffd8.journal" dev="xvda2" ino=375 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.560:17349): avc: denied { map } for pid=96962 comm="systemctl" path="/var/log/journal/ec29a1211a6f237d1f152d0c2da78887/system@2eaddb6aaf654c54ba64f94f957d9abc-000000000000098a-00063bb84f6fffd8.journal" dev="xvda2" ino=375 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.562:17350): avc: denied { getattr } for pid=96963 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158605 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.562:17351): avc: denied { execute } for pid=96963 comm="sh" name="rpm" dev="xvda2" ino=158605 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.562:17352): avc: denied { read } for pid=96963 comm="sh" name="rpm" dev="xvda2" ino=158605 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.563:17353): avc: denied { open } for pid=96964 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158605 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.563:17354): avc: denied { execute_no_trans } for pid=96964 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158605 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.563:17355): avc: denied { map } for pid=96964 comm="rpm" path="/usr/bin/rpm" dev="xvda2" ino=158605 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.568:17356): avc: denied { search } for pid=96964 comm="rpm" name="rpm" dev="xvda2" ino=131076 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir permissive=1 ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.568:17357): avc: denied { open } for pid=96964 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite" dev="xvda2" ino=131077 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.568:17358): avc: denied { setattr } for pid=96964 comm="rpm" name="rpmdb.sqlite-wal" dev="xvda2" ino=131078 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:47 2025 type=AVC msg=audit(1754513447.568:17359): avc: denied { map } for pid=96964 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite-shm" dev="xvda2" ino=131079 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:54 2025 type=AVC msg=audit(1754513454.839:17366): avc: denied { search } for pid=97177 comm="(sd-askpwagent)" name="fs" dev="proc" ino=606 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 ---- time->Wed Aug 6 16:50:54 2025 type=AVC msg=audit(1754513454.839:17367): avc: denied { read } for pid=97177 comm="(sd-askpwagent)" name="nr_open" dev="proc" ino=607 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:54 2025 type=AVC msg=audit(1754513454.839:17368): avc: denied { open } for pid=97177 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=607 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:54 2025 type=AVC msg=audit(1754513454.839:17369): avc: denied { getattr } for pid=97177 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=607 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:54 2025 type=AVC msg=audit(1754513454.839:17370): avc: denied { ioctl } for pid=97177 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=607 ioctlcmd=0x5401 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Wed Aug 6 16:50:54 2025 type=AVC msg=audit(1754513454.843:17372): avc: denied { read } for pid=97177 comm="systemd-tty-ask" name="ask-password" dev="tmpfs" ino=22 scontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 ---- time->Wed Aug 6 16:50:54 2025 type=AVC msg=audit(1754513454.843:17373): avc: denied { watch } for pid=97177 comm="systemd-tty-ask" path="/run/user/0/systemd/ask-password" dev="tmpfs" ino=22 scontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 ---- time->Wed Aug 6 16:50:54 2025 type=AVC msg=audit(1754513454.846:17375): avc: denied { signal } for pid=97176 comm="systemctl" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tclass=process permissive=1 ---- time->Wed Aug 6 16:51:17 2025 type=AVC msg=audit(1754513477.916:18005): avc: denied { connectto } for pid=100556 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 16:51:19 2025 type=AVC msg=audit(1754513479.274:18066): avc: denied { connectto } for pid=100874 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 16:51:24 2025 type=AVC msg=audit(1754513484.051:18277): avc: denied { name_connect } for pid=101985 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 16:52:02 2025 type=AVC msg=audit(1754513522.288:19327): avc: denied { connectto } for pid=108464 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 16:52:09 2025 type=AVC msg=audit(1754513529.554:19658): avc: denied { name_connect } for pid=110206 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 16:52:47 2025 type=AVC msg=audit(1754513567.001:20836): avc: denied { connectto } for pid=116386 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 16:52:53 2025 type=AVC msg=audit(1754513573.903:21167): avc: denied { name_connect } for pid=118126 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 16:53:28 2025 type=AVC msg=audit(1754513608.544:22133): avc: denied { connectto } for pid=123382 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 16:53:35 2025 type=AVC msg=audit(1754513615.360:22464): avc: denied { name_connect } for pid=125126 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 16:54:18 2025 type=AVC msg=audit(1754513658.535:23744): avc: denied { connectto } for pid=131722 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 16:54:25 2025 type=AVC msg=audit(1754513665.448:24075): avc: denied { name_connect } for pid=133462 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 16:54:59 2025 type=AVC msg=audit(1754513699.233:25010): avc: denied { connectto } for pid=139160 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Wed Aug 6 16:55:06 2025 type=AVC msg=audit(1754513706.098:25341): avc: denied { name_connect } for pid=140903 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.253:25919): avc: denied { search } for pid=141380 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.253:25920): avc: denied { search } for pid=141380 comm="Wt-8" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.253:25921): avc: denied { read } for pid=141380 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.253:25922): avc: denied { search } for pid=141380 comm="Wt-8" name="141380" dev="proc" ino=560814 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.253:25923): avc: denied { read } for pid=141380 comm="Wt-8" name="statm" dev="proc" ino=559002 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.253:25924): avc: denied { open } for pid=141380 comm="Wt-8" path="/proc/141380/statm" dev="proc" ino=559002 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.253:25925): avc: denied { getattr } for pid=141380 comm="Wt-8" path="/proc/141380/statm" dev="proc" ino=559002 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.253:25926): avc: denied { read } for pid=141380 comm="Wt-8" name="meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.253:25927): avc: denied { open } for pid=141380 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.253:25928): avc: denied { getattr } for pid=141380 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.253:25929): avc: denied { search } for pid=141380 comm="Wt-8" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.253:25930): avc: denied { search } for pid=141380 comm="Wt-8" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.253:25931): avc: denied { getattr } for pid=141380 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10678 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.254:25932): avc: denied { read } for pid=141380 comm="Wt-8" name="memory.max" dev="cgroup2" ino=10678 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.254:25933): avc: denied { open } for pid=141380 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=10678 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.937:25935): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.937:25937): avc: denied { signal } for pid=141223 comm="sqlservr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.938:25938): avc: denied { fork } for pid=141380 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.938:25939): avc: denied { setsched } for pid=141380 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.938:25940): avc: denied { getsched } for pid=141380 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.939:25941): avc: denied { use } for pid=141380 comm="Wt-1004" path="socket:[559643]" dev="sockfs" ino=559643 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.939:25942): avc: denied { append } for pid=141380 comm="Wt-1004" path="socket:[559643]" dev="sockfs" ino=559643 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.939:25943): avc: denied { write } for pid=141380 comm="Wt-1004" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.940:25944): avc: denied { write } for pid=141380 comm="Wt-1004" path="/var/opt/mssql/log/errorlog" dev="xvda2" ino=394520 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.940:25945): avc: denied { read } for pid=653 comm="systemd-journal" name="status" dev="proc" ino=559868 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.940:25946): avc: denied { open } for pid=653 comm="systemd-journal" path="/proc/141380/status" dev="proc" ino=559868 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.940:25947): avc: denied { getattr } for pid=653 comm="systemd-journal" path="/proc/141380/status" dev="proc" ino=559868 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.940:25948): avc: denied { ioctl } for pid=653 comm="systemd-journal" path="/proc/141380/status" dev="proc" ino=559868 ioctlcmd=0x5401 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.940:25949): avc: denied { read } for pid=653 comm="systemd-journal" name="exe" dev="proc" ino=562276 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.941:25950): avc: denied { getattr } for pid=653 comm="systemd-journal" scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25951): avc: denied { search } for pid=141380 comm="Wt-1004" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25952): avc: denied { search } for pid=141380 comm="Wt-1004" name="var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25953): avc: denied { search } for pid=141380 comm="Wt-1004" name="mssql" dev="xvda2" ino=393843 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25954): avc: denied { getattr } for pid=141380 comm="Wt-1004" path="/var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25955): avc: denied { getattr } for pid=141380 comm="Wt-1004" path="/var/opt/mssql" dev="xvda2" ino=393843 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25956): avc: denied { read } for pid=141380 comm="Wt-1004" name="system" dev="xvda2" ino=393850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25957): avc: denied { open } for pid=141380 comm="Wt-1004" path="/var/opt/mssql/.system/system" dev="xvda2" ino=393850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25958): avc: denied { read } for pid=141380 comm="Wt-1004" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25959): avc: denied { open } for pid=141380 comm="Wt-1004" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25960): avc: denied { getattr } for pid=141380 comm="Wt-1004" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25961): avc: denied { read } for pid=141380 comm="Wt-1004" name="sbin" dev="xvda2" ino=823 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25962): avc: denied { search } for pid=141380 comm="Wt-1004" name="usr" dev="xvda2" ino=131073 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25963): avc: denied { read } for pid=141380 comm="Wt-1004" name="bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25964): avc: denied { getattr } for pid=141380 comm="Wt-1004" path="/usr/bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25965): avc: denied { read } for pid=141380 comm="Wt-1004" name="lib" dev="xvda2" ino=821 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25966): avc: denied { read } for pid=141380 comm="Wt-1004" name="lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.943:25967): avc: denied { getattr } for pid=141380 comm="Wt-1004" path="/usr/lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.946:25968): avc: denied { write } for pid=141380 comm="Wt-1012" path="/var/opt/mssql/data/model_replicatedmaster.ldf" dev="xvda2" ino=394516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.978:25969): avc: denied { lock } for pid=141380 comm="Wt-1004" path="/var/opt/mssql/data/model_replicatedmaster.mdf" dev="xvda2" ino=394515 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.978:25970): avc: denied { search } for pid=141380 comm="Wt-1004" name="etc" dev="xvda2" ino=8193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.978:25971): avc: denied { read } for pid=141380 comm="Wt-1004" name="localtime" dev="xvda2" ino=27 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.978:25972): avc: denied { search } for pid=141380 comm="Wt-1004" name="zoneinfo" dev="xvda2" ino=131599 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:39 2025 type=AVC msg=audit(1754513739.978:25973): avc: denied { getattr } for pid=141380 comm="Wt-1004" path="/usr/share/zoneinfo/America/New_York" dev="xvda2" ino=132393 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:40 2025 type=AVC msg=audit(1754513740.045:25974): avc: denied { read } for pid=141380 comm="Wt-1004" path="/var/opt/mssql/data/modellog.ldf" dev="xvda2" ino=394512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:40 2025 type=AVC msg=audit(1754513740.086:25975): avc: denied { lock } for pid=141380 comm="Wt-1004" path="/var/opt/mssql/log/log_7.trc" dev="xvda2" ino=395093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:40 2025 type=AVC msg=audit(1754513740.104:25976): avc: denied { read } for pid=141380 comm="Wt-880" name="krb5.conf" dev="xvda2" ino=1723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Wed Aug 6 16:55:40 2025 type=AVC msg=audit(1754513740.104:25977): avc: denied { getattr } for pid=141380 comm="Wt-880" path="/etc/krb5.conf" dev="xvda2" ino=1723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0"