diff -Nru rsyslog-8.2006.0/debian/changelog rsyslog-8.2006.0/debian/changelog
--- rsyslog-8.2006.0/debian/changelog	2020-06-26 00:54:01.000000000 +1200
+++ rsyslog-8.2006.0/debian/changelog	2021-01-18 13:49:11.000000000 +1300
@@ -1,3 +1,10 @@
+rsyslog (8.2006.0-2ubuntu2) groovy; urgency=medium
+
+  * debian/dmesg.service: Change /var/log/dmesg from 0644 to 0640
+    to adhere to new DMESG_RESTRICT restrictions. (LP: #1912122)
+
+ -- Matthew Ruffell <matthew.ruffell@canonical.com>  Mon, 18 Jan 2021 13:49:11 +1300
+
 rsyslog (8.2006.0-2ubuntu1) groovy; urgency=medium
 
   [ Christian Ehrhardt ]
diff -Nru rsyslog-8.2006.0/debian/dmesg.service rsyslog-8.2006.0/debian/dmesg.service
--- rsyslog-8.2006.0/debian/dmesg.service	2020-06-26 00:54:01.000000000 +1200
+++ rsyslog-8.2006.0/debian/dmesg.service	2021-01-18 13:49:11.000000000 +1300
@@ -4,9 +4,10 @@
 [Service]
 Type=idle
 StandardOutput=file:/var/log/dmesg
-ExecStartPre=-/usr/bin/savelog -q -p -n -c 5 /var/log/dmesg
+ExecStartPre=-/usr/bin/savelog -m640 -q -p -n -c 5 /var/log/dmesg
 ExecStart=/bin/journalctl --boot 0 --dmesg --output short-monotonic --quiet --no-pager --no-hostname
 ExecStartPost=/bin/chgrp adm /var/log/dmesg
+ExecStartPost=/bin/chmod 0640 /var/log/dmesg
 
 [Install]
 WantedBy=multi-user.target