This implies to me that any user could insert input events to your X
server, and thus click on any part of the screen, etc.
These permissions are definitely inappropriate.
** Changed in: udev (Ubuntu)
Status: Incomplete = Won't Fix
--
wminput should provide udev rule
If you're having permission problems with wminput, run with sudo. The
README's solution is insecure and future work appears to take a much
smarter approach.
** Changed in: cwiid (Ubuntu)
Status: In Progress = Invalid
--
wminput should provide udev rule
After speaking with cjwatson on this, I think it may be simpler and
wiser to advise users to run wminput via sudo. Newer versions in
upstream have a better approach that alter related functionality
anyways.
--
wminput should provide udev rule
https://bugs.launchpad.net/bugs/140890
You received
Please justify why uinput can be world-readable and writable; what does
the device do? What are the security implications?
** Changed in: udev (Ubuntu)
Importance: Undecided = Wishlist
Status: New = Incomplete
--
wminput should provide udev rule
https://bugs.launchpad.net/bugs/140890
From the kernel uinput.c:
* User level driver support for input subsystem
wminput is used to make the mouse cursor controllable by a Wiimote
connected via bluetooth. The security implications are unclear to me.
I happen to know that the device is also used for thinkfinger, which
will be pulled
This patch should add a rule as outlined in the manpage.
** Attachment added: cwiid_0.5.03+svn20070508-2ubuntu1.debdiff
http://launchpadlibrarian.net/9436282/cwiid_0.5.03%2Bsvn20070508-2ubuntu1.debdiff
--
wminput should provide udev rule
https://bugs.launchpad.net/bugs/140890
You received
** Changed in: cwiid (Ubuntu)
Assignee: (unassigned) = Luke Yelavich (themuso)
Status: New = In Progress
--
wminput should provide udev rule
https://bugs.launchpad.net/bugs/140890
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for
Apparently this is something better handled by the udev package itself,
in which case, something smarter may be needed than the above rule.
** Also affects: udev (Ubuntu)
Importance: Undecided
Status: New
--
wminput should provide udev rule
https://bugs.launchpad.net/bugs/140890
You