module zabbix_server_sock 1.0;require {
    type zabbix_var_run_t;
    type zabbix_t;
    class sock_file create;
}

#============= zabbix_t ==============
allow zabbix_t zabbix_var_run_t:sock_file create;

module zabbix_server_sock2 1.0;require {
    type zabbix_var_run_t;
    type zabbix_t;
    class sock_file { create unlink };
    class unix_stream_socket connectto;
}

#============= zabbix_t ==============


#!!!! The file '/run/zabbix/zabbix_server_lld.sock' is mislabeled on your system.
#!!!! Fix with $ restorecon -R -v /run/zabbix/zabbix_server_lld.sock
#!!!! This avc can be allowed using the boolean 'daemons_enable_cluster_mode'  allow zabbix_t self:unix_stream_socket connectto;


#!!!! This avc is allowed in the current policy
allow zabbix_t zabbix_var_run_t:sock_file create;
allow zabbix_t zabbix_var_run_t:sock_file unlink;

module zabbix_server_sock3 1.0;

require {
    type zabbix_var_run_t;
    type zabbix_t;
    class sock_file { create unlink };
    class unix_stream_socket connectto;
}

#============= zabbix_t ==============

#!!!! This avc is allowed in the current policy
allow zabbix_t self:unix_stream_socket connectto;

#!!!! This avc is allowed in the current policy
allow zabbix_t zabbix_var_run_t:sock_file { create unlink };