The group-owner of all log files written by
rsyslog
should be root
.
These log files are determined by the second part of each Rule line in
/etc/rsyslog.conf
and typically all appear in /var/log
.
For each log file LOGFILE referenced in /etc/rsyslog.conf
,
run the following command to inspect the file's group owner:
$ ls -l LOGFILE
If the owner is not root
,
run the following command to
correct this:
$ sudo chgrp root LOGFILE