diff --git a/roles/rsyslog_server/templates/rsyslog.conf b/roles/rsyslog_server/templates/rsyslog.conf
index ab7a7082d..72db1e094 100644
--- a/roles/rsyslog_server/templates/rsyslog.conf
+++ b/roles/rsyslog_server/templates/rsyslog.conf
@@ -49,19 +49,17 @@ template(name="DynBootLog" type="string" string="/var/log/remote/%HOSTNAME%/%$YE
 
 ruleset(name="remote_rule"){
     if prifilt("authpriv.*") then {
-       action(type="omfile"  dynaFile="DynMessages" dirCreateMode="0755" )
-    } else if prifilt("authpriv.*") then {
-       action(type="omfile"  dynaFile="DynSecure" dirCreateMode="0755" )
+       action(type="omfile"  dynaFile="DynSecure" dirCreateMode="0700" fileCreateMode="0600" )
     } else if prifilt("mail.*") then {
-       action(type="omfile"  dynaFile="DynMaillog" dirCreateMode="0755" )
+       action(type="omfile"  dynaFile="DynMaillog" dirCreateMode="0700" fileCreateMode="0600" )
     } else if prifilt("cron.*") then {
-       action(type="omfile"  dynaFile="DynCron" dirCreateMode="0755" )
+       action(type="omfile"  dynaFile="DynCron" dirCreateMode="0700" fileCreateMode="0600" )
     } else if prifilt("uucp,news.crit") then {
-       action(type="omfile"  dynaFile="DynSpooler" dirCreateMode="0755" )
+       action(type="omfile"  dynaFile="DynSpooler" dirCreateMode="0700" fileCreateMode="0600" )
     } else if prifilt("local7.*") then {
-       action(type="omfile"  dynaFile="DynBootLog" dirCreateMode="0755" )
+       action(type="omfile"  dynaFile="DynBootLog" dirCreateMode="0700" fileCreateMode="0600" )
     } else {
-       action(type="omfile"  dynaFile="DynMessages" dirCreateMode="0755" )
+       action(type="omfile"  dynaFile="DynMessages" dirCreateMode="0700" fileCreateMode="0600" )
     }
 }