From b3c20e512fc3eae27976853735d5e1554996cb62 Mon Sep 17 00:00:00 2001 From: Jakob Unterwurzacher Date: Thu, 19 Oct 2017 22:04:46 +0200 Subject: [PATCH] MANPAGE: explain that you may have to pass -aessiv with -masterkey ...if the filesystem was created with that option (or reverse mode). Mitigates https://github.com/rfjakob/gocryptfs/issues/148 --- Documentation/MANPAGE.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/Documentation/MANPAGE.md b/Documentation/MANPAGE.md index 26652cc..cfe27a5 100644 --- a/Documentation/MANPAGE.md +++ b/Documentation/MANPAGE.md @@ -134,7 +134,12 @@ option can be used to mount a gocryptfs filesystem without a config file. Note that the command line, and with it the master key, is visible to anybody on the machine who can execute "ps -auxwww". This is meant as a recovery option for emergencies, such as if you have -forgotten your password. +forgotten the password or lost the config file. + +Even if a config file exists, it will not be used. All non-standard +settings have to be passed on the command line: `-aessiv` when you +mount a filesystem that was created using reverse mode, or +`-plaintextnames` for a filesystem that was created with that option. Example master key: 6f717d8b-6b5f8e8a-fd0aa206-778ec093-62c5669b-abd229cd-241e00cd-b4d6713d