$FileCreateMode 0640
$FileOwner root 
$FileGroup adm

kern.*                          -/var/log/kern.log
& ~