diff --git a/make/defs-dev.mk b/make/defs-dev.mk
index 6b7efe07..c558f5ce 100644
--- a/make/defs-dev.mk
+++ b/make/defs-dev.mk
@@ -171,7 +171,7 @@ LD_CONFDIRGROUP  ?= $(CFGDIROWNER)
 LD_CONFDIRMODE   ?= $(CFGDIRMODE)
 LOGROTOWNER      ?= $(CFGOWNER)
 LOGROTGROUP      ?= $(CFGGROUP)
-LOGROTMODE       ?= $(CFGMODE)
+LOGROTMODE       ?= 644 # group writable files are ignored by logrotate
 LOGROTDIROWNER   ?= $(CFGDIROWNER)
 LOGROTDIRGROUP   ?= $(CFGDIRGROUP)
 LOGROTDIRMODE    ?= $(CFGDIRMODE)
diff --git a/make/defs-dist.mk b/make/defs-dist.mk
index dc67243c..ca1e13f7 100644
--- a/make/defs-dist.mk
+++ b/make/defs-dist.mk
@@ -172,7 +172,7 @@ LD_CONFDIRGROUP  ?= $(CFGDIROWNER)
 LD_CONFDIRMODE   ?= $(CFGDIRMODE)
 LOGROTOWNER      ?= $(CFGOWNER)
 LOGROTGROUP      ?= $(CFGGROUP)
-LOGROTMODE       ?= $(CFGMODE)
+LOGROTMODE       ?= 644 # group writable files are ignored by logrotate
 LOGROTDIROWNER   ?= $(CFGDIROWNER)
 LOGROTDIRGROUP   ?= $(CFGDIROWNER)
 LOGROTDIRMODE    ?= $(CFGDIRMODE)