An XCCDF Rule
/var/log/journal/.*/system.journal
$ sudo chown root /var/log/journal/.*/system.journal