Hey Guix, On Guix System the log files (in /var/log) generated by syslogd are currently (commit 151f3d4) world readable. They should probably only be readable by root (for the same reason that dmesg can only be run by root).
It isn't possible to set the umask with fork-exec-constructor, is it? Otherwise that might have been a simple solution. Regards, Diego