zabbix agent fails to load on rhel 10.1 due to selinux policy mismatch

CentOS Infra issue/request

Please file this generic issue template or feel free to select another one in the list above (Description / Choose a template)

Issue Type

• Issue - problem with something that was working
• [] Feature Request - something you'd like us to add/modify/change
• [] Task - mostly used by CentOS Infra team for day-to-day operations or bigger plans

Description

We got zabbix warning (server side) about some rhel 10.1 machines that were supposed to have updated to zabbix 7.0.23 (from 7.0.18) and it failed to reload due to this :

zabbix_agentd[1620120]: zabbix_agentd [1620120]: cannot open "/var/log/zabbix/zabbix_agentd.log": [13] Permission denied

It seems to be blocked by selinux, which was working before :

grep denied /var/log/audit/audit.log|audit2allow

#============= zabbix_agent_t ==============
allow zabbix_agent_t var_log_t:file open;

To be investigated and fixed (or reported upstream)