diff --git a/ansible/files/postgresql_config/sbpostgres_apparmor b/ansible/files/postgresql_config/sbpostgres_apparmor index d5cb1de1e3..4410048d06 100644 --- a/ansible/files/postgresql_config/sbpostgres_apparmor +++ b/ansible/files/postgresql_config/sbpostgres_apparmor @@ -50,6 +50,8 @@ profile sbpostgres flags=(attach_disconnected) { /usr/bin/false ix, # kill needed for postgresql to reload itself /bin/kill ix, + /usr/bin/kill ix, + signal (send) set=(hup) peer=unconfined, # When parent executes shell, transition to restricted profile # This accounts for popen, which postgres uses for any child process