reverse: hide custom -config file located inside CIPHERDIR

In reverse mode, a custom config file passed via -config that lives inside
CIPHERDIR was presented as an ordinary encrypted file in the encrypted view,
which is useless and confusing. By default the config is mapped to a virtual
gocryptfs.conf, but ConfigCustom skips that mapping, so an in-CIPHERDIR custom
config was neither mapped nor hidden.

Plumb the config path into the reverse RootNode and treat a custom config file
located inside CIPHERDIR as excluded in isExcludedPlain, hiding it from both
readdir and lookup. Also document the -config reverse-mode behaviour in
MANPAGE.md and add a regression test.

Fixes #1009

1 files changed, 1 insertions, 0 deletions

diff --git a/mount.go b/mount.go
index 2508409..4b78be7 100644
--- a/mount.go
+++ b/mount.go
@@ -274,6 +274,7 @@ func initFuseFrontend(args *argContainer) (rootNode fs.InodeEmbedder, wipeKeys f
 		PlaintextNames:     args.plaintextnames,
 		LongNames:          args.longnames,
 		ConfigCustom:       args._configCustom,
+		Config:             args.config,
 		NoPrealloc:         args.noprealloc,
 		ForceOwner:         args._forceOwner,
 		Exclude:            args.exclude,