From e73b9c3ce1535855805d8918cc2aa4e569d1a6e1 Mon Sep 17 00:00:00 2001
From: bbedward <bbedward@gmail.com>
Date: Tue, 15 Sep 2026 12:35:18 -0400
Subject: [PATCH] evdev: open input devices read-only

go-evdev default is O_RDWR but we dont need to open evdev devices RW

(cherry picked from commit 6e9a6571326514784825308789d5464845116368)
---
 core/internal/server/evdev/manager.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/core/internal/server/evdev/manager.go b/core/internal/server/evdev/manager.go
index c9831d10a..0c2efb0a3 100644
--- a/core/internal/server/evdev/manager.go
+++ b/core/internal/server/evdev/manager.go
@@ -126,7 +126,7 @@ func findKeyboards() ([]EvdevDevice, error) {
 
 	var keyboards []EvdevDevice
 	for _, path := range matches {
-		device, err := evdev.Open(path)
+		device, err := evdev.OpenWithFlags(path, os.O_RDONLY)
 		if err != nil {
 			continue
 		}
@@ -207,7 +207,7 @@ func (m *Manager) watchForNewKeyboards() {
 					continue
 				}
 
-				device, err := evdev.Open(event.Name)
+				device, err := evdev.OpenWithFlags(event.Name, os.O_RDONLY)
 				if err != nil {
 					m.devicesMutex.Unlock()
 					continue