From 9f82ca21ee9c97f695a08cd8c21e7dbf8949e8f3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Krist=C3=B3f=20T=C3=B3th?= <mrtoth@strongds.hu>
Date: Wed, 25 Mar 2026 22:00:32 +0100
Subject: [PATCH] Add /dev/input/ to SENSITIVE_PATHS for blacklist mode

---
 src/blacklist.rs | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/blacklist.rs b/src/blacklist.rs
index f7fab8a..93a0875 100644
--- a/src/blacklist.rs
+++ b/src/blacklist.rs
@@ -259,6 +259,8 @@ const SENSITIVE_PATHS: &[&str] = &[
     // -- D-Bus sockets (can execute commands via systemd) --
     "/run/dbus",
     "/var/run/dbus",
+    // -- input devices (keylogging via evdev) --
+    "/dev/input/",
     // -- X11 / Wayland sockets (keystroke injection, screen capture) --
     "/tmp/.X11-unix",
     "/tmp/.ICE-unix",