An XCCDF Rule
/var/log/journal/.*/system.journal
$ sudo chmod 0640 /var/log/journal/.*/system.journal