the zabbix-server logrotate snippet lacks "su zabbix zabbix" in there, and causes logrotate to not rotate logs

error: skipping "/var/log/zabbix/zabbix_server.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.