diff --git a/data/common/common.yaml b/data/common/common.yaml
--- a/data/common/common.yaml
+++ b/data/common/common.yaml
@@ -2865,6 +2865,8 @@
   - ^/var/lib/docker/buildkit/
   - ^/run/schroot/
   - ^/run/k3s/
+  # directory traversal not allowed under postgresql directories
+  - postgresql/.*/pg_wal
 
 icinga2::apiusers:
   root: