----
type=PROCTITLE msg=audit(10/14/25 08:45:20.694:25438) : proctitle=/usr/libexec/qemu-kvm -name guest=instance-00000001,debug-threads=on -S -object {"qom-type":"secret","id":"masterKey0","format": 
type=SYSCALL msg=audit(10/14/25 08:45:20.694:25438) : arch=x86_64 syscall=openat success=no exit=EACCES(Permission denied) a0=AT_FDCWD a1=0x56496fb0f5fe a2=O_RDONLY a3=0x0 items=0 ppid=47947 pid=93969 auid=tripleo-admin uid=qemu gid=qemu euid=qemu suid=qemu fsuid=qemu egid=qemu sgid=qemu fsgid=qemu tty=(none) ses=12 comm=qemu-kvm exe=/usr/libexec/qemu-kvm subj=system_u:system_r:svirt_tcg_t:s0:c72,c241 key=(null) 
type=AVC msg=audit(10/14/25 08:45:20.694:25438) : avc:  denied  { read } for  pid=93969 comm=qemu-kvm name=max_map_count dev="proc" ino=254453 scontext=system_u:system_r:svirt_tcg_t:s0:c72,c241 tcontext=system_u:object_r:sysctl_vm_t:s0 tclass=file permissive=0 
----
type=PROCTITLE msg=audit(10/14/25 09:37:02.752:63333) : proctitle=/usr/sbin/virtlogd 
type=SYSCALL msg=audit(10/14/25 09:37:02.752:63333) : arch=x86_64 syscall=access success=yes exit=0 a0=0x556c7909fcd0 a1=R_OK a2=0x1 a3=0x0 items=0 ppid=1 pid=225416 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=virtlogd exe=/usr/sbin/virtlogd subj=system_u:system_r:virtlogd_t:s0-s0:c0.c1023 key=(null) 
type=AVC msg=audit(10/14/25 09:37:02.752:63333) : avc:  denied  { dac_read_search } for  pid=225416 comm=virtlogd capability=dac_read_search  scontext=system_u:system_r:virtlogd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:virtlogd_t:s0-s0:c0.c1023 tclass=capability permissive=0 
----
type=PROCTITLE msg=audit(10/14/25 09:37:02.752:63334) : proctitle=/usr/sbin/virtlogd 
type=SYSCALL msg=audit(10/14/25 09:37:02.752:63334) : arch=x86_64 syscall=openat success=yes exit=5 a0=AT_FDCWD a1=0x556c7909fcd0 a2=O_RDONLY a3=0x0 items=0 ppid=1 pid=225416 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=virtlogd exe=/usr/sbin/virtlogd subj=system_u:system_r:virtlogd_t:s0-s0:c0.c1023 key=(null) 
type=AVC msg=audit(10/14/25 09:37:02.752:63334) : avc:  denied  { dac_read_search } for  pid=225416 comm=virtlogd capability=dac_read_search  scontext=system_u:system_r:virtlogd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:virtlogd_t:s0-s0:c0.c1023 tclass=capability permissive=0 
