We have the same problem New deploy with LVL2 CIS breaks the /var/log/ folder. -- Unit rabbitmq-server.service has begun starting up. Apr 07 14:56:14 landscapeamqp-1 rabbitmq[17114]: /usr/sbin/rabbitmq-server: 33: /usr/sbin/rabbitmq-server: cannot create /var/log/rabbitmq/startup_log: Permission denied Apr 07 14:56:14 landscapeamqp-1 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=rabbitmq-server comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 07 14:56:14 landscapeamqp-1 systemd[1]: rabbitmq-server.service: Main process exited, code=exited, status=2/INVALIDARGUMENT root@landscapeamqp-1:/var/log# df -h Filesystem Size Used Avail Use% Mounted on udev 1.9G 0 1.9G 0% /dev tmpfs 394M 656K 393M 1% /run /dev/vda2 37G 6.5G 29G 19% / tmpfs 2.0G 0 2.0G 0% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock tmpfs 2.0G 0 2.0G 0% /sys/fs/cgroup tmpfs 100K 0 100K 0% /var/lib/lxd/shmounts tmpfs 100K 0 100K 0% /var/lib/lxd/devlxd tmpfs 394M 0 394M 0% /run/user/1000 root@landscapeamqp-1:/var/log# ls -lash total 1.2M 4.0K drwxr-x--- 13 root syslog 4.0K Apr 7 14:38 . 4.0K drwxr-xr-x 13 root root 4.0K Mar 25 16:06 .. 4.0K drwxr-x--- 2 root root 4.0K Jan 17 12:03 aide 4.0K -rw-r----- 1 root root 3.8K Apr 7 14:38 alternatives.log 4.0K drwxr-x--- 2 root root 4.0K Sep 27 2018 apparmor 4.0K drwxr-x--- 2 root root 4.0K Apr 7 15:00 apt 4.0K drwxr-x--- 2 root adm 4.0K Apr 7 14:37 audit 8.0K -rw-r----- 1 syslog adm 6.8K Apr 7 14:54 auth.log 0 -rw-r----- 1 root utmp 0 Mar 25 16:06 btmp 216K -rw-r----- 1 syslog adm 216K Apr 7 14:37 cloud-init.log 160K -rw-r----- 1 root adm 155K Apr 7 14:37 cloud-init-output.log 4.0K drwxr-x--- 2 root root 4.0K Sep 3 2021 dist-upgrade 164K -rw-r----- 1 root root 158K Apr 7 15:00 dpkg.log 4.0K drwxr-s---+ 3 root systemd-journal 4.0K Apr 7 14:32 journal 4.0K drwxr-xr-x 2 syslog adm 4.0K Apr 7 14:37 juju 56K -rw-r----- 1 syslog adm 56K Apr 7 14:37 kern.log 4.0K drwxr-x--- 2 landscape landscape 4.0K Apr 7 14:54 landscape 12K -rw-r----- 1 root utmp 286K Apr 7 14:54 lastlog 4.0K drwxr-x--- 2 root root 4.0K Apr 7 14:37 lxd 4.0K -rw-r----- 1 syslog adm 595 Apr 7 14:37 mail.log 4.0K drwxr-xr-x 2 rabbitmq rabbitmq 4.0K Jun 23 2021 rabbitmq 480K -rw-r----- 1 syslog adm 480K Apr 7 15:00 syslog 8.0K -rw------- 1 root root 63K Apr 7 14:38 tallylog 0 -rw-r----- 1 root root 0 Apr 7 14:32 ubuntu-advantage.log 4.0K drwxr-x--- 2 root adm 4.0K Apr 7 14:32 unattended-upgrades 4.0K -rw-r----- 1 root utmp 2.7K Apr 7 14:54 wtmp root@landscapeamqp-1:/var/log# cd rabbitmq/ root@landscapeamqp-1:/var/log/rabbitmq# ls -las total 8 4 drwxr-xr-x 2 rabbitmq rabbitmq 4096 Jun 23 2021 . 4 drwxr-x--- 13 root syslog 4096 Apr 7 14:38 ..