/var/log/shorewall-init.log {
  missingok
  notifempty
  create 0600 root root
}