diff --git a/init/init.qcom.rc b/init/init.qcom.rc
index 0b580cb..c312fad 100644
--- a/init/init.qcom.rc
+++ b/init/init.qcom.rc
@@ -913,3 +913,8 @@ service vendor.audio-hal /vendor/bin/hw/android.hardware.audio.service
     ioprio rt 4
     writepid /dev/cpuset/foreground/tasks /dev/stune/foreground/tasks
     onrestart restart audioserver
+
+on property:sys.boot_completed=1
+    # Restrict permissions to socket file
+    # to hide Magisk & co.
+    chmod 440 /proc/net/unix