From: Christian Brauner <christian.brauner@xxxxxxxxxx> Hey, Similar to what we do in overlayfs and now in cachefiles too ecryptfs should rely on a private mount that can't change mount properties underneath it and puts ecryptfs in full control (apart from changes that affect the superblock of the underlying fs of course) over the mount it is using to store its encrypted files in. Thanks! Christian Christian Brauner (3): ecryptfs: remove unused helpers ecryptfs: use private mount in path ecryptfs: extend ro check to private mount fs/ecryptfs/ecryptfs_kernel.h | 12 ------------ fs/ecryptfs/main.c | 19 ++++++++++++++++++- 2 files changed, 18 insertions(+), 13 deletions(-) base-commit: e49d033bddf5b565044e2abe4241353959bc9120 -- 2.27.0