mrtoth/agent-sandbox
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add /dev/input/ to SENSITIVE_PATHS for blacklist mode

Browse Source
This commit is contained in:
Kristóf Tóth
2026-03-25 22:00:32 +01:00
parent ada9da7ae7
commit 9f82ca21ee
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/blacklist.rs
View File

@@ -259,6 +259,8 @@ const SENSITIVE_PATHS: &[&str] = &[
// -- D-Bus sockets (can execute commands via systemd) -- // -- D-Bus sockets (can execute commands via systemd) --
"/run/dbus", "/run/dbus",
"/var/run/dbus", "/var/run/dbus",
// -- input devices (keylogging via evdev) --
"/dev/input/",
// -- X11 / Wayland sockets (keystroke injection, screen capture) -- // -- X11 / Wayland sockets (keystroke injection, screen capture) --
"/tmp/.X11-unix", "/tmp/.X11-unix",
"/tmp/.ICE-unix", "/tmp/.ICE-unix",