- Change the persmissions for /var/run/postgresql to 1775, so that

the directory can only be used by users in the postgres group.
  At the same time a patch will be added to the postgresqlXX
  packages that adds a fallback to /tmp if socket creation in
  /var/run/postgresql fails.

OBS-URL: https://build.opensuse.org/package/show/server:database:postgresql/postgresql?expand=0&rev=113

postgresql-tmpfiles.conf

@@ -1,3 +1,3 @@
 # For the PostgreSQL server's unix domain socket
-d /run/postgresql 1777 root root - -
+d /run/postgresql 1775 postgres postgres - -
 f /var/lib/pgsql/.bash_profile 0640 postgres postgres - /usr/share/postgresql/bash_profile

postgresql.changes

@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Tue Feb 19 16:05:22 UTC 2019 - Reinhard Max <max@suse.com>
+
+- Change the persmissions for /var/run/postgresql to 1775, so that
+  the directory can only be used by users in the postgres group.
+  At the same time a patch will be added to the postgresqlXX
+  packages that adds a fallback to /tmp if socket creation in
+  /var/run/postgresql fails.
+
 -------------------------------------------------------------------
 Thu Jan 31 13:23:56 UTC 2019 - Reinhard Max <max@suse.com>
 

postgresql.spec

@@ -384,10 +384,10 @@ fi
 %_tmpfilesdir/postgresql.conf
 %_unitdir/
 /usr/share/postgresql/postgresql-script
-%ghost %dir %attr(1777,root,root) /run/postgresql
+%ghost %dir %attr(1775,root,root) /run/postgresql
 %else
 %config /etc/init.d/postgresql
-%dir %attr(1777,root,root) /var/run/postgresql
+%dir %attr(1775,root,root) /var/run/postgresql
 %endif
 
 %files test