---- time->Fri Aug 29 21:30:36 2025 type=AVC msg=audit(1756517436.720:17390): avc: denied { connectto } for pid=95577 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 29 21:30:36 2025 type=AVC msg=audit(1756517436.748:17391): avc: denied { read } for pid=95585 comm="systemctl" name="journal" dev="xvda2" ino=1805 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 29 21:30:36 2025 type=AVC msg=audit(1756517436.749:17392): avc: denied { read } for pid=95585 comm="systemctl" name="system@773be0170d0b46739710de578bb95a8b-0000000000000001-00063d8ad74b55c8.journal" dev="xvda2" ino=63 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:36 2025 type=AVC msg=audit(1756517436.749:17393): avc: denied { open } for pid=95585 comm="systemctl" path="/var/log/journal/ec21ec44df3589a15f3d18384048ffae/system@773be0170d0b46739710de578bb95a8b-0000000000000001-00063d8ad74b55c8.journal" dev="xvda2" ino=63 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:36 2025 type=AVC msg=audit(1756517436.749:17394): avc: denied { map } for pid=95585 comm="systemctl" path="/var/log/journal/ec21ec44df3589a15f3d18384048ffae/system@773be0170d0b46739710de578bb95a8b-0000000000000001-00063d8ad74b55c8.journal" dev="xvda2" ino=63 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:36 2025 type=AVC msg=audit(1756517436.751:17395): avc: denied { getattr } for pid=95586 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158610 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:36 2025 type=AVC msg=audit(1756517436.751:17396): avc: denied { execute } for pid=95586 comm="sh" name="rpm" dev="xvda2" ino=158610 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:36 2025 type=AVC msg=audit(1756517436.751:17397): avc: denied { read } for pid=95586 comm="sh" name="rpm" dev="xvda2" ino=158610 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:36 2025 type=AVC msg=audit(1756517436.752:17398): avc: denied { open } for pid=95587 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158610 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:36 2025 type=AVC msg=audit(1756517436.752:17399): avc: denied { execute_no_trans } for pid=95587 comm="sh" path="/usr/bin/rpm" dev="xvda2" ino=158610 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:36 2025 type=AVC msg=audit(1756517436.752:17400): avc: denied { map } for pid=95587 comm="rpm" path="/usr/bin/rpm" dev="xvda2" ino=158610 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_exec_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:36 2025 type=AVC msg=audit(1756517436.756:17401): avc: denied { search } for pid=95587 comm="rpm" name="rpm" dev="xvda2" ino=131076 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 29 21:30:36 2025 type=AVC msg=audit(1756517436.756:17402): avc: denied { open } for pid=95587 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite" dev="xvda2" ino=131077 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:36 2025 type=AVC msg=audit(1756517436.757:17403): avc: denied { setattr } for pid=95587 comm="rpm" name="rpmdb.sqlite-wal" dev="xvda2" ino=131078 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:36 2025 type=AVC msg=audit(1756517436.757:17404): avc: denied { map } for pid=95587 comm="rpm" path="/usr/lib/sysimage/rpm/rpmdb.sqlite-shm" dev="xvda2" ino=131079 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:43 2025 type=AVC msg=audit(1756517443.614:17411): avc: denied { search } for pid=95796 comm="(sd-askpwagent)" name="fs" dev="proc" ino=2441 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 29 21:30:43 2025 type=AVC msg=audit(1756517443.614:17412): avc: denied { read } for pid=95796 comm="(sd-askpwagent)" name="nr_open" dev="proc" ino=2442 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:43 2025 type=AVC msg=audit(1756517443.614:17413): avc: denied { open } for pid=95796 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=2442 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:43 2025 type=AVC msg=audit(1756517443.614:17414): avc: denied { getattr } for pid=95796 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=2442 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:43 2025 type=AVC msg=audit(1756517443.614:17415): avc: denied { ioctl } for pid=95796 comm="(sd-askpwagent)" path="/proc/sys/fs/nr_open" dev="proc" ino=2442 ioctlcmd=0x5401 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 ---- time->Fri Aug 29 21:30:43 2025 type=AVC msg=audit(1756517443.618:17417): avc: denied { read } for pid=95796 comm="systemd-tty-ask" name="ask-password" dev="tmpfs" ino=22 scontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 29 21:30:43 2025 type=AVC msg=audit(1756517443.618:17418): avc: denied { watch } for pid=95796 comm="systemd-tty-ask" path="/run/user/0/systemd/ask-password" dev="tmpfs" ino=22 scontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 ---- time->Fri Aug 29 21:30:43 2025 type=AVC msg=audit(1756517443.622:17420): avc: denied { signal } for pid=95795 comm="systemctl" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:systemd_passwd_agent_t:s0-s0:c0.c1023 tclass=process permissive=1 ---- time->Fri Aug 29 21:31:05 2025 type=AVC msg=audit(1756517465.369:18050): avc: denied { connectto } for pid=99171 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 29 21:31:06 2025 type=AVC msg=audit(1756517466.526:18111): avc: denied { connectto } for pid=99490 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 29 21:31:11 2025 type=AVC msg=audit(1756517471.935:18322): avc: denied { name_connect } for pid=100601 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 29 21:31:50 2025 type=AVC msg=audit(1756517510.233:19372): avc: denied { connectto } for pid=106765 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 29 21:31:57 2025 type=AVC msg=audit(1756517517.594:19703): avc: denied { name_connect } for pid=108505 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 29 21:32:35 2025 type=AVC msg=audit(1756517555.295:20881): avc: denied { connectto } for pid=114686 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 29 21:32:42 2025 type=AVC msg=audit(1756517562.276:21212): avc: denied { name_connect } for pid=116428 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 29 21:33:16 2025 type=AVC msg=audit(1756517596.817:22178): avc: denied { connectto } for pid=121676 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 29 21:33:23 2025 type=AVC msg=audit(1756517603.581:22509): avc: denied { name_connect } for pid=123420 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 29 21:34:07 2025 type=AVC msg=audit(1756517647.154:23787): avc: denied { connectto } for pid=130018 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 29 21:34:14 2025 type=AVC msg=audit(1756517654.042:24118): avc: denied { name_connect } for pid=131759 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 29 21:34:47 2025 type=AVC msg=audit(1756517687.665:25053): avc: denied { connectto } for pid=137429 comm="getent" path="/systemd/userdb/io.systemd.DynamicUser" scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1 ---- time->Fri Aug 29 21:34:54 2025 type=AVC msg=audit(1756517694.530:25384): avc: denied { name_connect } for pid=139172 comm="python3" dest=1433 scontext=unconfined_u:unconfined_r:mssql_conf_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mssql_port_t:s0 tclass=tcp_socket permissive=1 ---- time->Fri Aug 29 21:35:27 2025 type=AVC msg=audit(1756517727.716:25962): avc: denied { search } for pid=139649 comm="Wt-8" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:27 2025 type=AVC msg=audit(1756517727.716:25963): avc: denied { search } for pid=139649 comm="Wt-8" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:27 2025 type=AVC msg=audit(1756517727.716:25964): avc: denied { read } for pid=139649 comm="Wt-8" name="self" dev="proc" ino=4026531842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:27 2025 type=AVC msg=audit(1756517727.716:25965): avc: denied { search } for pid=139649 comm="Wt-8" name="139649" dev="proc" ino=542705 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:27 2025 type=AVC msg=audit(1756517727.716:25966): avc: denied { read } for pid=139649 comm="Wt-8" name="statm" dev="proc" ino=544315 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:27 2025 type=AVC msg=audit(1756517727.716:25967): avc: denied { open } for pid=139649 comm="Wt-8" path="/proc/139649/statm" dev="proc" ino=544315 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:27 2025 type=AVC msg=audit(1756517727.716:25968): avc: denied { getattr } for pid=139649 comm="Wt-8" path="/proc/139649/statm" dev="proc" ino=544315 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:27 2025 type=AVC msg=audit(1756517727.716:25969): avc: denied { read } for pid=139649 comm="Wt-8" name="meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:27 2025 type=AVC msg=audit(1756517727.716:25970): avc: denied { open } for pid=139649 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:27 2025 type=AVC msg=audit(1756517727.716:25971): avc: denied { getattr } for pid=139649 comm="Wt-8" path="/proc/meminfo" dev="proc" ino=4026532216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:27 2025 type=AVC msg=audit(1756517727.716:25972): avc: denied { search } for pid=139649 comm="Wt-8" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:27 2025 type=AVC msg=audit(1756517727.716:25973): avc: denied { search } for pid=139649 comm="Wt-8" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:27 2025 type=AVC msg=audit(1756517727.716:25974): avc: denied { getattr } for pid=139649 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=11078 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:27 2025 type=AVC msg=audit(1756517727.716:25975): avc: denied { read } for pid=139649 comm="Wt-8" name="memory.max" dev="cgroup2" ino=11078 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:27 2025 type=AVC msg=audit(1756517727.716:25976): avc: denied { open } for pid=139649 comm="Wt-8" path="/sys/fs/cgroup/system.slice/mssql-server.service/memory.max" dev="cgroup2" ino=11078 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.328:25978): avc: denied { signal } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.328:25979): avc: denied { signal } for pid=139492 comm="sqlservr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.329:25981): avc: denied { fork } for pid=139649 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.329:25982): avc: denied { setsched } for pid=139649 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.329:25983): avc: denied { getsched } for pid=139649 comm="Wt-8" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.330:25984): avc: denied { use } for pid=139649 comm="Wt-960" path="socket:[544797]" dev="sockfs" ino=544797 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.330:25985): avc: denied { append } for pid=139649 comm="Wt-960" path="socket:[544797]" dev="sockfs" ino=544797 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.330:25986): avc: denied { write } for pid=139649 comm="Wt-960" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.332:25987): avc: denied { read } for pid=654 comm="systemd-journal" name="status" dev="proc" ino=545068 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.332:25988): avc: denied { write } for pid=139649 comm="Wt-960" path="/var/opt/mssql/log/errorlog" dev="xvda2" ino=655419 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.332:25989): avc: denied { open } for pid=654 comm="systemd-journal" path="/proc/139649/status" dev="proc" ino=545068 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.332:25990): avc: denied { getattr } for pid=654 comm="systemd-journal" path="/proc/139649/status" dev="proc" ino=545068 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.332:25991): avc: denied { ioctl } for pid=654 comm="systemd-journal" path="/proc/139649/status" dev="proc" ino=545068 ioctlcmd=0x5401 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.332:25992): avc: denied { read } for pid=654 comm="systemd-journal" name="exe" dev="proc" ino=545401 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=lnk_file permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.332:25993): avc: denied { getattr } for pid=654 comm="systemd-journal" scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 trawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.334:25994): avc: denied { search } for pid=139649 comm="Wt-960" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.334:25995): avc: denied { search } for pid=139649 comm="Wt-960" name="var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.334:25996): avc: denied { search } for pid=139649 comm="Wt-960" name="mssql" dev="xvda2" ino=655361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.334:25997): avc: denied { getattr } for pid=139649 comm="Wt-960" path="/var" dev="xvda2" ino=16385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.334:25998): avc: denied { getattr } for pid=139649 comm="Wt-960" path="/var/opt/mssql" dev="xvda2" ino=655361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.334:25999): avc: denied { read } for pid=139649 comm="Wt-960" name="system" dev="xvda2" ino=655370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.334:26000): avc: denied { open } for pid=139649 comm="Wt-960" path="/var/opt/mssql/.system/system" dev="xvda2" ino=655370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.335:26001): avc: denied { read } for pid=139649 comm="Wt-960" name="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.335:26002): avc: denied { open } for pid=139649 comm="Wt-960" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.335:26003): avc: denied { getattr } for pid=139649 comm="Wt-960" path="/" dev="xvda2" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.335:26004): avc: denied { read } for pid=139649 comm="Wt-960" name="bin" dev="xvda2" ino=769 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.335:26005): avc: denied { search } for pid=139649 comm="Wt-960" name="usr" dev="xvda2" ino=131073 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.335:26006): avc: denied { read } for pid=139649 comm="Wt-960" name="bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.335:26007): avc: denied { getattr } for pid=139649 comm="Wt-960" path="/usr/bin" dev="xvda2" ino=131081 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.335:26008): avc: denied { read } for pid=139649 comm="Wt-960" name="lib" dev="xvda2" ino=821 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.335:26009): avc: denied { read } for pid=139649 comm="Wt-960" name="lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.335:26010): avc: denied { getattr } for pid=139649 comm="Wt-960" path="/usr/lib" dev="xvda2" ino=131074 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.337:26011): avc: denied { write } for pid=139649 comm="Wt-956" path="/var/opt/mssql/data/model_replicatedmaster.ldf" dev="xvda2" ino=655415 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.368:26012): avc: denied { lock } for pid=139649 comm="Wt-960" path="/var/opt/mssql/data/model_replicatedmaster.mdf" dev="xvda2" ino=655414 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.368:26013): avc: denied { search } for pid=139649 comm="Wt-960" name="etc" dev="xvda2" ino=8193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.368:26014): avc: denied { read } for pid=139649 comm="Wt-960" name="localtime" dev="xvda2" ino=27 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.368:26015): avc: denied { search } for pid=139649 comm="Wt-960" name="zoneinfo" dev="xvda2" ino=131602 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.368:26016): avc: denied { getattr } for pid=139649 comm="Wt-960" path="/usr/share/zoneinfo/America/New_York" dev="xvda2" ino=132396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:locale_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.433:26017): avc: denied { read } for pid=139649 comm="Wt-960" path="/var/opt/mssql/data/modellog.ldf" dev="xvda2" ino=655411 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.474:26018): avc: denied { lock } for pid=139649 comm="Wt-960" path="/var/opt/mssql/log/log_7.trc" dev="xvda2" ino=655737 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.492:26019): avc: denied { read } for pid=139649 comm="Wt-844" name="krb5.conf" dev="xvda2" ino=1723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0" ---- time->Fri Aug 29 21:35:28 2025 type=AVC msg=audit(1756517728.492:26020): avc: denied { getattr } for pid=139649 comm="Wt-844" path="/etc/krb5.conf" dev="xvda2" ino=1723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:krb5_conf_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:mssql_server_t:s0"