...

public class StreamsConfig {
  // newly added
   public static final String ALLOW_OS_GROUP_WRITE_ACCESS_CONFIG = "allow.os.group.write.access";
}

The config priority of the new config will be LOW .

Proposed Changes

On startup, when Kafka Streams verifies the permission for the state directory, it will revoke group write access by default, but if allow.os.group.write.access is set to "true", it will grant group write access.

...