diff --git a/policy/modules/services/postgresql.if b/policy/modules/services/postgresql.if index ecef19f22..9d2f31168 100644 --- a/policy/modules/services/postgresql.if +++ b/policy/modules/services/postgresql.if @@ -428,11 +428,10 @@ interface(`postgresql_stream_connect',` type postgresql_t, postgresql_var_run_t, postgresql_tmp_t; ') + stream_connect_pattern($1, { postgresql_var_run_t postgresql_tmp_t }, { postgresql_var_run_t postgresql_tmp_t }, postgresql_t) + files_search_pids($1) - allow $1 postgresql_t:unix_stream_socket connectto; - allow $1 postgresql_var_run_t:sock_file write; - # Some versions of postgresql put the sock file in /tmp - allow $1 postgresql_tmp_t:sock_file write; + files_search_tmp($1) ') ########################################