diff --git a/roles/rsyslog_collector/tasks/main.yml b/roles/rsyslog_collector/tasks/main.yml
index 0ee20a2..16a3ab9 100644
--- a/roles/rsyslog_collector/tasks/main.yml
+++ b/roles/rsyslog_collector/tasks/main.yml
@@ -11,6 +11,9 @@
   file:
     path: "{{ rsyslog_collector_base_dir }}"
     state: directory
+    owner: root
+    group: adm
+    mode: u=rwx,g=rwx,o=
 
 - name: Deploy rsyslog input configuration file
   become: true
diff --git a/roles/rsyslog_common/tasks/main.yml b/roles/rsyslog_common/tasks/main.yml
index ce0d35a..c3a0cc3 100644
--- a/roles/rsyslog_common/tasks/main.yml
+++ b/roles/rsyslog_common/tasks/main.yml
@@ -37,6 +37,9 @@
   file:
     path: /etc/systemd/journald.conf.d
     state: directory
+    owner: root
+    group: root
+    mode: u=rwx,g=rx,o=rx
 
 - name: Deploy journald configuration
   become: true