diff --git a/ceph/ceph/files/ceph.sh b/ceph/ceph/files/ceph.sh
index d427f40f3..1b42bdffd 100644
--- a/ceph/ceph/files/ceph.sh
+++ b/ceph/ceph/files/ceph.sh
@@ -33,6 +33,9 @@ start ()
     if [ ! -f ${CEPH_FILE} ]; then
         touch ${CEPH_FILE}
     fi
+
+    #restrict log file access
+    chmod 0640 ${LOGFILE}
 }
 
 stop ()