fsck: mark temporary mount read-only

We don't write during fsck, but somebody else might try
to.

1 files changed, 1 insertions, 0 deletions

diff --git a/fsck.go b/fsck.go
index c0db576..1f40514 100644
--- a/fsck.go
+++ b/fsck.go
@@ -260,6 +260,7 @@ func fsck(args *argContainer) (exitcode int) {
 		os.Exit(exitcodes.Usage)
 	}
 	args.allow_other = false
+	args.ro = true
 	var err error
 	args.mountpoint, err = ioutil.TempDir("", "gocryptfs.fsck.")
 	if err != nil {