openstack-ansible-security/doc/source/developer-notes/V-38459.rst

The tasks in file_perms.yml will ensure that /etc/group is owned by the root account.