The meaning of these two groups ("adm" and "log") seems to be
identical. Both allow read access to system logs, except "adm" is used
by journald and "log" by syslogd (and tomcat, apparently).
Wouldn't it make sense to do away with one?