/etc/rsyslog.conf root.root 600