Add /dev/input/ to SENSITIVE_PATHS for blacklist mode

2026-03-25 22:00:32 +01:00
parent ada9da7ae7
commit 9f82ca21ee
1 changed files with 2 additions and 0 deletions
--- a/src/blacklist.rs
+++ b/src/blacklist.rs
@@ -259,6 +259,8 @@ const SENSITIVE_PATHS: &[&str] = &[
    // -- D-Bus sockets (can execute commands via systemd) --
    "/run/dbus",
    "/var/run/dbus",
+    // -- input devices (keylogging via evdev) --
+    "/dev/input/",
    // -- X11 / Wayland sockets (keystroke injection, screen capture) --
    "/tmp/.X11-unix",
    "/tmp/.ICE-unix",