diff --git a/rsyslog.changes b/rsyslog.changes
index 8686e58..f776db6 100644
--- a/rsyslog.changes
+++ b/rsyslog.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Fri Feb 22 11:47:22 UTC 2019 - Thomas.Blume@suse.com
+
+- set default permissions before include directives (bsc#1126233)
+  * Logfile open modes depend on position in the config file, see
+    https://www.rsyslog.com/doc/rsconf1_filecreatemode.html
+
 -------------------------------------------------------------------
 Wed Nov 21 15:49:02 UTC 2018 - Enno Gotthold <egotthold@suse.com>
 
diff --git a/rsyslog.conf.in b/rsyslog.conf.in
index cfa8c05..6c79788 100644
--- a/rsyslog.conf.in
+++ b/rsyslog.conf.in
@@ -35,6 +35,15 @@ $ModLoad imklog.so
 # set log level 1 (same as in /etc/sysconfig/syslog).
 $klogConsoleLogLevel    1
 
+#
+# Set the default permissions for all log files.
+#
+$FileOwner root
+$FileGroup root
+$FileCreateMode 0640
+$DirCreateMode 0750
+$Umask 0022
+
 # Use rsyslog native, rfc5424 conform log format as default
 # ($ActionFileDefaultTemplate RSYSLOG_FileFormat).
 #
@@ -59,15 +68,6 @@ $IncludeConfig ADDITIONAL_SOCKETS
 #
 $IncludeConfig ETC_RSYSLOG_D_GLOB
 
-#
-# Set the default permissions for all log files.
-#
-$FileOwner root
-$FileGroup root
-$FileCreateMode 0640
-$DirCreateMode 0750
-$Umask 0022
-
 ###
 # print most important on tty10 and on the xconsole pipe
 #
diff --git a/rsyslog.spec b/rsyslog.spec
index eb5ac01..cff6f19 100644
--- a/rsyslog.spec
+++ b/rsyslog.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package rsyslog
 #
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -12,7 +12,7 @@
 # license that conforms to the Open Source Definition (Version 1.9)
 # published by the Open Source Initiative.
 
-# Please submit bugfixes or comments via https://bugs.opensuse.org/
+# Please submit bugfixes or comments via http://bugs.opensuse.org/
 #