YARN-9442. container working directory has group read permissions. Contributed by Jim Brennan. (cherry picked from commit 2ac029b949f041da2ee04da441c5f9f85e1f2c64)
YARN-8640. Restore previous state in container-executor after failure. Contributed by Jim Brennan (cherry picked from commit d1d129aa9deecebf42261947fcb0b2ca46dacad5)