diff --git a/libcontainer/container_linux.go b/libcontainer/container_linux.go
index 6ff4d96a..197a4c04 100644
--- a/libcontainer/container_linux.go
+++ b/libcontainer/container_linux.go
@@ -1111,7 +1111,7 @@ func (c *linuxContainer) Checkpoint(criuOpts *CriuOpts) error {
 			return err
 		}
 
-		err = ioutil.WriteFile(filepath.Join(criuOpts.ImagesDirectory, descriptorsFilename), fdsJSON, 0655)
+		err = ioutil.WriteFile(filepath.Join(criuOpts.ImagesDirectory, descriptorsFilename), fdsJSON, 0600)
 		if err != nil {
 			return err
 		}