setroubleshoot: SELinux is preventing /usr/sbin/zabbix_server_mysql from unlink access on the sock_file zabbix_server_preprocessing.sock. For complete SELinux messages run: sealert -l a2affa37-6f5e-4e6d-801f-5ed54d72b50d
Aug 7 14:03:27 srvzab python: SELinux is preventing /usr/sbin/zabbix_server_mysql from unlink access on the sock_file zabbix_server_preprocessing.sock.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that zabbix_server_mysql should be allowed unlink access on the zabbix_server_preprocessing.sock sock_file by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'zabbix_server' --raw | audit2allow -M my-zabbixserver#012# semodule -i my-zabbixserver.pp#012

# ausearch -c 'zabbix_server' --raw | audit2allow -M my-zabbixserver
# semodule -i my-zabbixserver.pp
# service zabbix-server start
# service zabbix-server status
  Redirecting to /bin/systemctl status zabbix-server.service
● zabbix-server.service - Zabbix Server
Loaded: loaded (/usr/lib/systemd/system/zabbix-server.service; enabled; vendor preset: disabled)
Active: active (running) since Tue 2018-08-07 14:37:05 UTC; 1h 29min ago
Process: 920 ExecStart=/usr/sbin/zabbix_server -c $CONFFILE (code=exited, status=0/SUCCESS)
Main PID: 955 (zabbix_server)
CGroup: /system.slice/zabbix-server.service
├─ 955 /usr/sbin/zabbix_server -c /etc/zabbix/zabbix_server.conf
├─1474 /usr/sbin/zabbix_server: configuration syncer [synced configuration in 0.007480 sec, idle 60 sec]
├─1475 /usr/sbin/zabbix_server: alerter #1 started
├─1476 /usr/sbin/zabbix_server: alerter #2 started
├─1477 /usr/sbin/zabbix_server: alerter #3 started
├─1478 /usr/sbin/zabbix_server: housekeeper [deleted 0 hist/trends, 0 items/triggers, 0 events, 0 sessions, 0 alarms, 0 audit items in 0.022023 sec, idle for 1 hour(s)]
├─1479 /usr/sbin/zabbix_server: timer #1 [processed 0 triggers, 0 events in 0.000010 sec, 0 maintenances in 0.000000 sec, idle 30 sec]
├─1480 /usr/sbin/zabbix_server: http poller #1 [got 0 values in 0.000463 sec, idle 5 sec]
├─1481 /usr/sbin/zabbix_server: discoverer #1 [processed 0 rules in 0.000515 sec, idle 60 sec]
├─1482 /usr/sbin/zabbix_server: history syncer #1 [synced 0 items in 0.000001 sec, idle 1 sec]
├─1483 /usr/sbin/zabbix_server: history syncer #2 [synced 0 items in 0.000001 sec, idle 1 sec]
├─1484 /usr/sbin/zabbix_server: history syncer #3 [synced 0 items in 0.000001 sec, idle 1 sec]
├─1485 /usr/sbin/zabbix_server: history syncer #4 [synced 0 items in 0.000001 sec, idle 1 sec]
├─1486 /usr/sbin/zabbix_server: escalator #1 [processed 0 escalations in 0.001016 sec, idle 3 sec]
├─1487 /usr/sbin/zabbix_server: proxy poller #1 [exchanged data with 0 proxies in 0.000002 sec, idle 5 sec]
├─1488 /usr/sbin/zabbix_server: self-monitoring [processed data in 0.000010 sec, idle 1 sec]
├─1489 /usr/sbin/zabbix_server: task manager [processed 0 task(s) in 0.000464 sec, idle 5 sec]
├─1490 /usr/sbin/zabbix_server: poller #1 [got 0 values in 0.000003 sec, idle 5 sec]
├─1491 /usr/sbin/zabbix_server: poller #2 [got 0 values in 0.000003 sec, idle 5 sec]
├─1492 /usr/sbin/zabbix_server: poller #3 [got 0 values in 0.000003 sec, idle 5 sec]
├─1493 /usr/sbin/zabbix_server: poller #4 [got 0 values in 0.000003 sec, idle 5 sec]
├─1494 /usr/sbin/zabbix_server: poller #5 [got 0 values in 0.000003 sec, idle 5 sec]
├─1495 /usr/sbin/zabbix_server: unreachable poller #1 [got 0 values in 0.000003 sec, idle 5 sec]
├─1496 /usr/sbin/zabbix_server: trapper #1 [processed data in 0.000000 sec, waiting for connection]
├─1497 /usr/sbin/zabbix_server: trapper #2 [processed data in 0.000000 sec, waiting for connection]
├─1498 /usr/sbin/zabbix_server: trapper #3 [processed data in 0.000000 sec, waiting for connection]
├─1499 /usr/sbin/zabbix_server: trapper #4 [processed data in 0.000000 sec, waiting for connection]
├─1500 /usr/sbin/zabbix_server: trapper #5 [processed data in 0.000259 sec, waiting for connection]
├─1501 /usr/sbin/zabbix_server: icmp pinger #1 [got 0 values in 0.000004 sec, idle 5 sec]
├─1502 /usr/sbin/zabbix_server: alert manager #1 [sent 0, failed 0 alerts, idle 5.013533 sec during 5.013534 sec]
├─1503 /usr/sbin/zabbix_server: preprocessing manager #1 [queued 0, processed 0 values, idle 5.015466 sec during 5.015469 sec]
├─1504 /usr/sbin/zabbix_server: preprocessing worker #1 started
├─1505 /usr/sbin/zabbix_server: preprocessing worker #2 started
└─1506 /usr/sbin/zabbix_server: preprocessing worker #3 started

Aug 07 14:37:04 srvzab.test systemd[1]: Starting Zabbix Server...
Aug 07 14:37:05 srvzab.test systemd[1]: PID file /run/zabbix/zabbix_server.pid not readable (yet?) after start.
Aug 07 14:37:05 srvzab.test systemd[1]: Started Zabbix Server.

module my-zabbixserver 1.0;

require {
type zabbix_var_run_t;
type zabbix_t;
class sock_file { create unlink };
class unix_stream_socket connectto;
}

#============= zabbix_t ==============

#!!!! The file '/run/zabbix/zabbix_server_preprocessing.sock' is mislabeled on your system. 
#!!!! Fix with $ restorecon -R -v /run/zabbix/zabbix_server_preprocessing.sock
#!!!! This avc can be allowed using the boolean 'daemons_enable_cluster_mode'
allow zabbix_t self:unix_stream_socket connectto;

#!!!! This avc is allowed in the current policy
allow zabbix_t zabbix_var_run_t:sock_file create;
allow zabbix_t zabbix_var_run_t:sock_file unlink;