Is this a case where these two files {tracking,edx}.log were already in place with the wrong permissions?
We should be able to let rsyslog write these with the correct permissions when the application starts as long as `{{ log_base_dir }}` is writable by syslog.