From 86d8336b43418c028c34c37f06fcbd43ab0d44a1 Mon Sep 17 00:00:00 2001
From: Jakob Unterwurzacher
Date: Sat, 8 May 2021 17:17:08 +0200
Subject: Add -acl flag to enable ACL enforcement

With test to verify that it actually works this
time: Run "make root_test".

Depends-on: https://github.com/rfjakob/gocryptfs/issues/536
Fixes: https://github.com/rfjakob/gocryptfs/issues/536
---
 mount.go | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'mount.go')

diff --git a/mount.go b/mount.go
index 1194104..9409471 100644
--- a/mount.go
+++ b/mount.go
@@ -396,6 +396,9 @@ func initGoFuse(rootNode fs.InodeEmbedder, args *argContainer) *fuse.Server {
 		// Make the kernel check the file permissions for us
 		mOpts.Options = append(mOpts.Options, "default_permissions")
 	}
+	if args.acl {
+		mOpts.EnableAcl = true
+	}
 	if args.forcedecode {
 		tlog.Info.Printf(tlog.ColorYellow + "THE OPTION \"-forcedecode\" IS ACTIVE. GOCRYPTFS WILL RETURN CORRUPT DATA!" +
 			tlog.ColorReset)
-- 
cgit v1.2.3