diff --git a/rootdir/init.rc b/rootdir/init.rc
index 72f351fab..0784c63ce 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -243,7 +243,7 @@ on post-fs-data
     mkdir /data/drm 0770 drm drm
 
     # Separate location for storing security policy files on data
-    mkdir /data/security 0600 system system
+    mkdir /data/security 0700 system system
 
     # If there is no fs-post-data action in the init.<device>.rc file, you
     # must uncomment this line, otherwise encrypted filesystems