Change ${socket_path} permissions so that users in the `postgres'

system group cannot create, rename, or delete files in ${socket_path}.

1 files changed, 1 insertions, 1 deletions

diff --git a/postgresql.init b/postgresql.init
index 9a1d64e..aef9f04 100755
--- a/postgresql.init
+++ b/postgresql.init
@@ -61,7 +61,7 @@ checkconfig() {
 
     # Set the proper permission for the socket path and create it if
     # it doesn't exist.
-    checkpath -d -m 0770 -o postgres:postgres ${socket_path}
+    checkpath -d -m 0750 -o postgres:postgres ${socket_path}
     if [ -e ${socket_path%/}/.s.PGSQL.${configured_port} ] ; then
         eerror "Socket conflict."
         eerror "A server is already listening on:"