diff --git a/syslog/safeacl b/syslog/safeacl
new file mode 100644
index 000000000..9f54902a6
--- /dev/null
+++ b/syslog/safeacl
@@ -0,0 +1,4 @@
+noedit=1
+any=0
+syslog=1
+others=1