Have you checked whether SELinux is affecting log writing? In RHEL 9, the Enforcing mode is enabled by default, which may restrict access to files even if standard permissions are set correctly. To verify if SELinux is causing the issue, you can temporarily disable it with:

sudo setenforce 0

This command temporarily switches SELinux to Permissive mode, where security checks are still performed but do not block operations and are only logged.