Comment 1 for bug 911507

I don't agree with the reasoning here. If the user has disabled passthrough mode, then any file in the lower filesystem that is not regognized by eCryptfs is an error.

eCryptfs should have an fsck which could remove such empty files from lower filesystem or convert those files to encrypted empty files. However, I don't think that filesystem should automatically do such a tricks. (Compare to existing filesystems such as ext4 - it does not automatically try to run fsck and fix logical problems in the filesystem.)

I'd prefer a single error message to syslog about the problem and then automatically remounting ecryptfs read-only. Then I would have to run fsck to fix the issue. Hopefully the syslog entry would point me towards that target.