commit b4daa3cccad80a170fbad2efe3061cafa670f94b
author Wei Wang <wvw@google.com> Fri Feb 01 11:53:58 2019 -0800
committer Wei Wang <wvw@google.com> Fri Feb 01 11:57:00 2019 -0800
tree 820522c287ad6b6e416d77176ced33cd46d58881
parent 256e78e82f53bc731af00200d85ce45e1b44f6af

Restrict zram_writeback permission

Bug: 74582279
Bug: 122659265
Test: Build
Change-Id: Iba610929bc02d7ee5a590f8ec5b440269dbc12f5

fs_mgr/fs_mgr.cpp

diff --git a/fs_mgr/fs_mgr.cpp b/fs_mgr/fs_mgr.cpp
index ded3678..f6cd396 100644
--- a/fs_mgr/fs_mgr.cpp
+++ b/fs_mgr/fs_mgr.cpp
@@ -1446,7 +1446,7 @@
     }
 
     // Prepare target path
-    unique_fd target_fd(TEMP_FAILURE_RETRY(open(loop.c_str(), O_RDWR | O_CREAT | O_CLOEXEC, 0664)));
+    unique_fd target_fd(TEMP_FAILURE_RETRY(open(loop.c_str(), O_RDWR | O_CREAT | O_CLOEXEC, 0600)));
     if (target_fd.get() == -1) {
         PERROR << "Cannot open target path: " << loop;
         return false;