From 8f2be5d93cda2696fce7bc1a3f8a888a19321f09 Mon Sep 17 00:00:00 2001
From: Jakob Unterwurzacher <jakobunt@gmail.com>
Date: Wed, 2 Jun 2021 19:32:20 +0200
Subject: [PATCH] fsck: mark temporary mount read-only

We don't write during fsck, but somebody else might try
to.
---
 fsck.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/fsck.go b/fsck.go
index c0db576..1f40514 100644
--- a/fsck.go
+++ b/fsck.go
@@ -260,6 +260,7 @@ func fsck(args *argContainer) (exitcode int) {
 		os.Exit(exitcodes.Usage)
 	}
 	args.allow_other = false
+	args.ro = true
 	var err error
 	args.mountpoint, err = ioutil.TempDir("", "gocryptfs.fsck.")
 	if err != nil {