Some file/socket descriptors are leaking to child processes and that makes problems when running with SELinux enabled. It was first observed in agent when it runs "hostname" binary, first issue was a file descriptor for the pid file and after fixing this I have seen leaking sockets.

Please see http://www.zabbix.com/forum/showthread.php?t=15671 for patches.