Michael can you use adm group instead of systemd-journal? adm is traditionaly used to allow people to read logs. i've open an upstream bug regarding that. https://bugzilla.redhat.com/show_bug.cgi?id=1047729 -- 1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333