diff -up ecryptfs-utils-108/src/include/ecryptfs.h.fixconst ecryptfs-utils-108/src/include/ecryptfs.h
--- ecryptfs-utils-108/src/include/ecryptfs.h.fixconst	2015-08-11 14:44:01.791816259 +0200
+++ ecryptfs-utils-108/src/include/ecryptfs.h	2015-08-11 14:44:01.794816251 +0200
@@ -479,8 +479,8 @@ int ecryptfs_eval_decision_graph(struct
 				 struct val_node **head,
 				 struct param_node *root_node,
 				 struct ecryptfs_name_val_pair *nvp_head);
-int ecryptfs_add_passphrase_key_to_keyring(char *auth_tok_sig, char *passphrase,
-					   char *salt);
+int ecryptfs_add_passphrase_key_to_keyring(char *auth_tok_sig, const char *passphrase,
+					   const char *salt);
 int ecryptfs_add_key_module_key_to_keyring(char *auth_tok_sig,
 					   struct ecryptfs_key_mod *key_mod);
 int ecryptfs_read_salt_hex_from_rc(char *salt_hex);
@@ -494,11 +494,11 @@ int parse_packet(struct ecryptfs_ctx *ct
 		 struct ecryptfs_message **reply);
 int ecryptfs_find_key_mod(struct ecryptfs_key_mod **key_mod,
 			  struct ecryptfs_ctx *ctx, char *key_mod_alias);
-int generate_passphrase_sig(char *passphrase_sig, char *fekek, char *salt,
-			    char *passphrase);
+int generate_passphrase_sig(char *passphrase_sig, char *fekek, const char *salt,
+			    const char *passphrase);
 int
 generate_payload(struct ecryptfs_auth_tok *auth_tok, char *passphrase_sig,
-		 char *salt, char *session_key_encryption_key);
+		 const char *salt, char *session_key_encryption_key);
 int
 ecryptfs_generate_key_payload(struct ecryptfs_auth_tok *auth_tok,
 			      struct ecryptfs_key_mod *key_mod, char *sig,
@@ -517,15 +517,15 @@ int ecryptfs_check_sig(char *auth_tok_si
 int ecryptfs_append_sig(char *auth_tok_sig, char *sig_cache_filename);
 int __ecryptfs_detect_wrapped_passphrase_file_version(const char *filename,
 						      uint8_t *version);
-int ecryptfs_wrap_passphrase_file(char *dest, char *wrapping_passphrase,
- 			     char *wrapping_salt, char *src);
-int ecryptfs_wrap_passphrase(char *filename, char *wrapping_passphrase,
-			     char *unused, char *decrypted_passphrase);
-int ecryptfs_unwrap_passphrase(char *decrypted_passphrase, char *filename,
-			       char *wrapping_passphrase, char *wrapping_salt);
+int ecryptfs_wrap_passphrase_file(const char *dest, const char *wrapping_passphrase,
+			     const char *wrapping_salt, const char *src);
+int ecryptfs_wrap_passphrase(const char *filename, const char *wrapping_passphrase,
+			     const char *unused, char *decrypted_passphrase);
+int ecryptfs_unwrap_passphrase(char *decrypted_passphrase, const char *filename,
+			       const char *wrapping_passphrase, const char *wrapping_salt);
 int ecryptfs_insert_wrapped_passphrase_into_keyring(
-	char *auth_tok_sig, char *filename, char *wrapping_passphrase,
-	char *salt);
+	char *auth_tok_sig, char *filename, const char *wrapping_passphrase,
+	const char *salt);
 char *ecryptfs_get_wrapped_passphrase_filename();
 struct ecryptfs_key_mod_ops *passphrase_get_key_mod_ops(void);
 int ecryptfs_validate_keyring(void);
@@ -573,7 +573,7 @@ char *ecryptfs_get_passphrase(char *prom
 int ecryptfs_run_daemon(struct ecryptfs_messaging_ctx *mctx);
 
 #define ECRYPTFS_PRIVATE_DIR "Private"
-char *ecryptfs_fetch_private_mnt(char *pw_dir);
+char *ecryptfs_fetch_private_mnt(const char *pw_dir);
 int ecryptfs_private_is_mounted(char *dev, char *mnt, char *sig, int mounting);
 
 #endif
diff -up ecryptfs-utils-108/src/libecryptfs/key_management.c.fixconst ecryptfs-utils-108/src/libecryptfs/key_management.c
--- ecryptfs-utils-108/src/libecryptfs/key_management.c.fixconst	2015-08-11 14:44:01.777816296 +0200
+++ ecryptfs-utils-108/src/libecryptfs/key_management.c	2015-08-11 14:44:01.795816249 +0200
@@ -55,7 +55,7 @@
  */
 int ecryptfs_generate_passphrase_auth_tok(struct ecryptfs_auth_tok **auth_tok,
 					  char *auth_tok_sig, char *fekek,
-					  char *salt, char *passphrase)
+					  const char *salt, const char *passphrase)
 {
 	int rc;
 
@@ -195,8 +195,8 @@ int ecryptfs_add_blob_to_keyring(char *b
  *
  * Returns 0 on add, 1 on pre-existed, negative on failure.
  */
-int ecryptfs_add_passphrase_key_to_keyring(char *auth_tok_sig, char *passphrase,
-					   char *salt)
+int ecryptfs_add_passphrase_key_to_keyring(char *auth_tok_sig, const char *passphrase,
+					  const char *salt)
 {
 	int rc;
 	char fekek[ECRYPTFS_MAX_KEY_BYTES];
@@ -382,8 +382,8 @@ out:
 	return rc;
 }
 
-int ecryptfs_wrap_passphrase_file(char *dest, char *wrapping_passphrase,
-				  char *salt, char *src)
+int ecryptfs_wrap_passphrase_file(const char *dest, const char *wrapping_passphrase,
+				  const char *salt, const char *src)
 {
 	int rc = 0;
 	ssize_t size;
@@ -540,8 +540,8 @@ out:
  *
  * Returns 0 upon success. Negative upon error.
  */
-int ecryptfs_wrap_passphrase(char *filename, char *wrapping_passphrase,
-			     char *unused, char *decrypted_passphrase)
+int ecryptfs_wrap_passphrase(const char *filename, const char *wrapping_passphrase,
+			     const char *unused, char *decrypted_passphrase)
 {
 	char wrapping_salt[ECRYPTFS_SALT_SIZE];
 	char wrapping_auth_tok_sig[ECRYPTFS_SIG_SIZE_HEX + 1];
@@ -822,8 +822,8 @@ out:
  * decryptfs_passphrase must be able to hold
  * ECRYPTFS_MAX_PASSPHRASE_BYTES + 1 bytes
  */
-int ecryptfs_unwrap_passphrase(char *decrypted_passphrase, char *filename,
-			       char *wrapping_passphrase, char *wrapping_salt)
+int ecryptfs_unwrap_passphrase(char *decrypted_passphrase, const char *filename,
+			       const char *wrapping_passphrase, const char *wrapping_salt)
 {
 	char v2_wrapping_salt[ECRYPTFS_SALT_SIZE];
 	char wrapping_auth_tok_sig[ECRYPTFS_SIG_SIZE_HEX + 1];
@@ -976,8 +976,8 @@ out:
  * into the user session keyring.
  */
 int ecryptfs_insert_wrapped_passphrase_into_keyring(
-	char *auth_tok_sig, char *filename, char *wrapping_passphrase,
-	char *salt)
+	char *auth_tok_sig, char *filename, const char *wrapping_passphrase,
+	const char *salt)
 {
 	char decrypted_passphrase[ECRYPTFS_MAX_PASSPHRASE_BYTES + 1] ;
 	int rc = 0;
diff -up ecryptfs-utils-108/src/libecryptfs/main.c.fixconst ecryptfs-utils-108/src/libecryptfs/main.c
--- ecryptfs-utils-108/src/libecryptfs/main.c.fixconst	2015-08-11 14:44:01.791816259 +0200
+++ ecryptfs-utils-108/src/libecryptfs/main.c	2015-08-11 14:44:01.795816249 +0200
@@ -92,7 +92,7 @@ out:
 /* Read ecryptfs private mount from file
  * Allocate and return a string
  */
-char *ecryptfs_fetch_private_mnt(char *pw_dir) {
+char *ecryptfs_fetch_private_mnt(const char *pw_dir) {
 	char *mnt_file = NULL;
 	char *mnt_default = NULL;
 	char *mnt = NULL;
@@ -212,7 +212,7 @@ int ecryptfs_private_is_mounted(char *de
  */
 int
 generate_passphrase_sig(char *passphrase_sig, char *fekek,
-			char *salt, char *passphrase)
+			const char *salt, const char *passphrase)
 {
 	char salt_and_passphrase[ECRYPTFS_MAX_PASSPHRASE_BYTES
 				 + ECRYPTFS_SALT_SIZE];
@@ -257,7 +257,7 @@ generate_passphrase_sig(char *passphrase
  */
 int
 generate_payload(struct ecryptfs_auth_tok *auth_tok, char *passphrase_sig,
-		 char *salt, char *session_key_encryption_key)
+		 const char *salt, char *session_key_encryption_key)
 {
 	int rc = 0;
 	int major, minor;