use sudo to modify rsyslog