From aa257564267c1a1f98f4ee3f51ac8873fd27eecb Mon Sep 17 00:00:00 2001
From: Wei Wang <wvw@google.com>
Date: Fri, 1 Feb 2019 11:53:58 -0800
Subject: [PATCH] Restrict zram_writeback permission

Bug: 74582279
Bug: 122659265
Test: Build
Change-Id: Iba610929bc02d7ee5a590f8ec5b440269dbc12f5
---
 fs_mgr/fs_mgr.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fs_mgr/fs_mgr.cpp b/fs_mgr/fs_mgr.cpp
index ded367839..f6cd396b1 100644
--- a/fs_mgr/fs_mgr.cpp
+++ b/fs_mgr/fs_mgr.cpp
@@ -1446,7 +1446,7 @@ static bool PrepareZramDevice(const std::string& loop, off64_t size, const std::
     }
 
     // Prepare target path
-    unique_fd target_fd(TEMP_FAILURE_RETRY(open(loop.c_str(), O_RDWR | O_CREAT | O_CLOEXEC, 0664)));
+    unique_fd target_fd(TEMP_FAILURE_RETRY(open(loop.c_str(), O_RDWR | O_CREAT | O_CLOEXEC, 0600)));
     if (target_fd.get() == -1) {
         PERROR << "Cannot open target path: " << loop;
         return false;