PuppetDB creates log files in the directory: /var/log/puppetlabs/puppetdb
The permissions applied to this directory seem to be incorrect:
# namei -m /var/log/puppetlabs/puppetdb/puppetdb.log
f: /var/log/puppetlabs/puppetdb/puppetdb.log
drwxr-xr-x /
drwxr-xr-x var
drwxrwxr-x log
drwxr-xr-x puppetlabs
drwx------ puppetdb
-rw-r----- puppetdb.log
Permissions for group execute and group read are missing on the puppetdb directory.