During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level
Created zabbix tracking bugs for this issue:
Affects: fedora-all [bug 2040755]
Created zabbix40 tracking bugs for this issue:
Affects: epel-all [bug 2040756]
Created zabbix50 tracking bugs for this issue:
Affects: epel-all [bug 2040757]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.