The archive-logs tool added in
MAPREDUCE-6415 leverages the Distributed Shell app. When using the DefaultContainerExecutor, this means that the job will actually run as the Yarn user, so the resulting har files are owned by the Yarn user instead of the original owner. The permissions are also now world-readable.
In the below example, the archived logs are owned by 'yarn' instead of 'paul' and are now world-readable: