AMBARI-3966. Secure cluster: task-controller binary should be owned by the group specified in taskcontroller.cfg (jaimin)

ambari-agent/src/main/puppet/modules/hdp-hadoop/manifests/init.pp

@@ -290,7 +290,7 @@ class hdp-hadoop(
     if ($hdp::params::security_enabled == true) {
       file { "${hdp::params::hadoop_bin}/task-controller":
         owner   => 'root',
-        group   => $hdp::params::user_group,
+        group   => $hdp::params::mapred_tt_group,
         mode    => '6050',
         require => Hdp-hadoop::Package['hadoop'],
         before  => Anchor['hdp-hadoop::end']

ambari-agent/src/main/puppet/modules/hdp-yarn/manifests/init.pp

@@ -152,7 +152,7 @@ define hdp-yarn::generate_common_configs() {
     $container_executor = "${hdp::params::yarn_container_bin}/container-executor"
     file { $container_executor:
       ensure => present,
-      group => $hdp::params::user_group,
+      group => $hdp-yarn::params::yarn_executor_container_group,
       mode => 6050
     }
 

ambari-agent/src/main/puppet/modules/hdp-yarn/manifests/params.pp

@@ -28,6 +28,7 @@ class hdp-yarn::params(
   ## security params
   $security_enabled = $hdp::params::security_enabled
   $smoke_user_keytab = $hdp::params::smokeuser_keytab
+  $yarn_executor_container_group = hdp_default("yarn-site/yarn.nodemanager.linux-container-executor.group","hadoop")
   $kinit_cmd = "${hdp::params::kinit_path_local} -kt ${smoke_user_keytab} ${smoke_test_user};"
   $rm_host = $hdp::params::rm_host
   $rm_port = $hdp::rm_port