# Description: Can read system logs.
# Usage: reserved

/var/log/ r,
/var/log/** r,

# Needed since we are root and the owner/group doesn't match :\
# So long as we have this, the cap must be reserved.
capability dac_override,
