diff --git a/client/tomcatconf/classpath.conf.in b/client/tomcatconf/classpath.conf.in
index f2aeebac2a4..3ae0fb4d778 100644
--- a/client/tomcatconf/classpath.conf.in
+++ b/client/tomcatconf/classpath.conf.in
@@ -36,11 +36,3 @@ done
 export CLASSPATH
 PATH=/sbin:/usr/sbin:$PATH
 export PATH
-
-#catalina.out owned by `cloud` not `root`
-if [ ! -f $TOMCAT_LOG ]; then
-    touch $TOMCAT_LOG
-    chown $TOMCAT_USER:$TOMCAT_USER $TOMCAT_LOG
-else
-    chown $TOMCAT_USER:$TOMCAT_USER $TOMCAT_LOG
-fi
diff --git a/packaging/centos63/cloud.spec b/packaging/centos63/cloud.spec
index 83ccae8c582..1f112ddd686 100644
--- a/packaging/centos63/cloud.spec
+++ b/packaging/centos63/cloud.spec
@@ -216,6 +216,8 @@ ln -sf /var/log/%{name}/management ${RPM_BUILD_ROOT}%{_datadir}/%{name}-manageme
 ln -sf /var/cache/%{name}/management/temp ${RPM_BUILD_ROOT}%{_datadir}/%{name}-management/temp
 ln -sf /var/cache/%{name}/management/work ${RPM_BUILD_ROOT}%{_datadir}/%{name}-management/work
 
+/bin/touch ${RPM_BUILD_ROOT}%{_localstatedir}/log/%{name}/management/catalina.out
+
 install -D client/target/utilities/bin/cloud-migrate-databases ${RPM_BUILD_ROOT}%{_bindir}/%{name}-migrate-databases
 install -D client/target/utilities/bin/cloud-set-guest-password ${RPM_BUILD_ROOT}%{_bindir}/%{name}-set-guest-password
 install -D client/target/utilities/bin/cloud-set-guest-sshkey ${RPM_BUILD_ROOT}%{_bindir}/%{name}-set-guest-sshkey
@@ -519,6 +521,7 @@ fi
 %dir %attr(0770,root,root) %{_localstatedir}/log/%{name}-management
 %{_defaultdocdir}/%{name}-management-%{version}/LICENSE
 %{_defaultdocdir}/%{name}-management-%{version}/NOTICE
+%attr(0644,cloud,cloud) %{_localstatedir}/log/%{name}/management/catalina.out
 
 %files agent
 %attr(0755,root,root) %{_bindir}/%{name}-setup-agent