From 3ac282047ff36affb86f260b54ff50653007fdee Mon Sep 17 00:00:00 2001
From: maximilize
Date: Fri, 26 Jun 2026 00:23:30 +0200
Subject: reverse: hide custom -config file located inside CIPHERDIR

In reverse mode, a custom config file passed via -config that lives inside
CIPHERDIR was presented as an ordinary encrypted file in the encrypted view,
which is useless and confusing. By default the config is mapped to a virtual
gocryptfs.conf, but ConfigCustom skips that mapping, so an in-CIPHERDIR custom
config was neither mapped nor hidden.

Plumb the config path into the reverse RootNode and treat a custom config file
located inside CIPHERDIR as excluded in isExcludedPlain, hiding it from both
readdir and lookup. Also document the -config reverse-mode behaviour in
MANPAGE.md and add a regression test.

Fixes #1009
---
 mount.go | 1 +
 1 file changed, 1 insertion(+)

(limited to 'mount.go')

diff --git a/mount.go b/mount.go
index 2508409..4b78be7 100644
--- a/mount.go
+++ b/mount.go
@@ -274,6 +274,7 @@ func initFuseFrontend(args *argContainer) (rootNode fs.InodeEmbedder, wipeKeys f
 		PlaintextNames:     args.plaintextnames,
 		LongNames:          args.longnames,
 		ConfigCustom:       args._configCustom,
+		Config:             args.config,
 		NoPrealloc:         args.noprealloc,
 		ForceOwner:         args._forceOwner,
 		Exclude:            args.exclude,
-- 
cgit v1.2.3