The meaning of these two groups ("adm" and "log") seems to be identical. Both allow read access to system logs, except "adm" is used by journald and "log" by syslogd (and tomcat, apparently). Wouldn't it make sense to do away with one?