From f3a05e1b726cab6628829f6e6005c772ddec7a18 Mon Sep 17 00:00:00 2001
From: Greg Sutcliffe <fedora@emeraldreverie.org>
Date: Thu, 28 May 2026 17:17:40 +0100
Subject: [PATCH] Zabbix: Fix cronjob that generates the SSH target list

---
 roles/batcave/files/zabbix-ssh-list.cron | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/roles/batcave/files/zabbix-ssh-list.cron b/roles/batcave/files/zabbix-ssh-list.cron
index 7abf5d6ee8..d565e80f96 100755
--- a/roles/batcave/files/zabbix-ssh-list.cron
+++ b/roles/batcave/files/zabbix-ssh-list.cron
@@ -11,6 +11,8 @@ TMP_FILE=$(mktemp)
 if [ -s "$TMP_FILE" ]; then
     mv "$TMP_FILE" /etc/zabbix/ssh-targets.txt
     chmod 644 /etc/zabbix/ssh-targets.txt
+    # creating and moving a file breaks selinux, so set it to match a file the agent can already read
+    chcon --reference=/etc/zabbix/fedora.psk /etc/zabbix/ssh-targets.txt
 else
     rm -f "$TMP_FILE"
 fi