| If another package is used to offload logs, such as syslog-ng, and is properly configured, this is not applicable. |
At the command line, run the following command to verify rsyslog generates log files that are not world readable:
# grep '^\$umask' /etc/rsyslog.conf
If "$umask" is not set to "0037" or more restrictive, this is a finding.