[7.16](backport #28347) [Docs] Update logging.files.permissions documentation to consider umask (#20584)

filebeat/docs/filebeat-general-options.asciidoc

@@ -41,14 +41,14 @@ That means in case there are some states where the TTL expired, these are only r
 The permissions mask to apply on registry data file. The default value is 0600. The permissions option must be a valid Unix-style file permissions mask expressed in octal notation. In Go, numbers in octal notation must start with 0.
 
 The most permissive mask allowed is 0640. If a higher permissions mask is
-specified via this setting, it will be subject to a umask of 0027.
+specified via this setting, it will be subject to an umask of 0027.
 
 This option is not supported on Windows.
 
 Examples:
 
-    0640: give read and write access to the file owner, and read access to members of the group associated with the file.
-    0600: give read and write access to the file owner, and no access to all others.
+* 0640: give read and write access to the file owner, and read access to members of the group associated with the file.
+* 0600: give read and write access to the file owner, and no access to all others.
 
 [source,yaml]
 -------------------------------------------------------------------------------------

filebeat/docs/howto/override-config-settings.asciidoc

@@ -37,7 +37,7 @@ logging.files:
   path: /var/log/filebeat
   name: filebeat
   keepfiles: 7
-  permissions: 0644
+  permissions: 0640
 ----
 
 To override the logging level and send logging output to standard error instead

libbeat/docs/loggingconfig.asciidoc

@@ -32,7 +32,7 @@ logging.files:
   path: /var/log/{beatname_lc}
   name: {beatname_lc}
   keepfiles: 7
-  permissions: 0644
+  permissions: 0640
 ----
 endif::win_only[]
 
@@ -45,7 +45,7 @@ logging.files:
   path: C:{backslash}ProgramData{backslash}{beatname_lc}{backslash}Logs
   name: {beatname_lc}
   keepfiles: 7
-  permissions: 0644
+  permissions: 0640
 ----
 endif::win_only[]
 
@@ -231,12 +231,15 @@ The permissions mask to apply when rotating log files. The default value is
 expressed in octal notation. In Go, numbers in octal notation must start with
 '0'.
 
+The most permissive mask allowed is 0640. If a higher permissions mask is
+specified via this setting, it will be subject to an umask of 0027.
+
+This option is not supported on Windows.
+
 Examples:
 
-* 0644: give read and write access to the file owner, and read access to all others.
+* 0640: give read and write access to the file owner, and read access to members of the group associated with the file.
 * 0600: give read and write access to the file owner, and no access to all others.
-* 0664: give read and write access to the file owner and members of the group
-associated with the file, as well as read access to all other users.
 
 [float]
 ==== `logging.files.interval`