...

The system needs to access the following, commonly guarded (encrypted) folders: 

• /var/lib/pgsql

• /var/lib/pgsql/data

...

Access to GuardPoints

The resource is relative to the GuardPoint. In other words, if the GuardPoint is /var/lib/pgsql, and you want to allow access to a particular file in that directory, you would only need to specify that specific file in your resource parameter.

...