** Description changed:

  [Availability]
  The package is already in universe.
  
  [Rationale]
- The package is depended upon by the new raspi-common seed, for inclusion in 
all pi related images. The reason for its inclusion in the seed is that the 
libraspberrypi-bin package provides the vcgencmd and dtoverlay utilities which 
are both required by rpi-eeprom (the subject of a separate MIR) for updating 
the boot EEPROM on the Raspberry Pi 4.
+ The package is depended upon by the new raspi-common seed, for inclusion in 
all pi related images. The reason for its inclusion in the seed is that the 
libraspberrypi-bin package provides the vcgencmd and dtoverlay utilities which 
are both required by rpi-eeprom (the subject of a separate MIR, LP: #1895137) 
for updating the boot EEPROM on the Raspberry Pi 4.
  
  The libraspberrypi0 package is a dependency of libraspberrypi-bin and
  both are built from the raspberrypi-userland source package.
  
  [Security]
  I am not aware of any open CVEs against the tools in libraspberrypi-bin or 
the libraries in libraspberrypi0.
  
  It may be worth noting that the -bin package installs a udev rule (in
  /lib/udev/10-local-rpi.rules) permitting members of the "video" group
  access to /dev/vchiq, which is required for all the VC related utilities
  (including vcgencmd, raspivid, and raspistill) to be operated without
  root privileges.
  
  [Quality assurance]
  The package is extensively used upstream on Raspbian, and is obviously 
actively maintained there. There is no meaningful test suite included in the 
package, but the contents of the package are regularly exercised in image 
testing (and boot EEPROM testing).
  
  [UI standards]
  I've added manual pages for all the utilities I'm able to, but localization 
is missing from all utilities at present. However, most users will never use 
these utilities directly (bar, perhaps, the raspivid and raspistill utilities 
for the camera module). Instead the most common scenario is that the utilities 
will be used (invisibly) by other scripts (e.g. rpi-eeprom-update) for 
maintenance purposes like manipulating the boot EEPROM.
  
  [Dependencies]
  As noted above, libraspberrypi-bin depends on libraspberrypi0. It also 
depends on device-tree-compiler and libc6, both of which are already in main. 
libraspberrypi0 in turn merely depends on libc6.
  
  [Standards compliance]
  The package installs its binaries under /usr/bin, and its libraries under 
/usr/lib. Upstream does not version their API, so the libraries are unversioned.
  
  [Maintenance]
  The package is maintained by the Ubuntu Foundations team.
  
  [Background information]
  As noted above, the package is a dependency of the recently added 
raspi-common seed 
(https://lists.ubuntu.com/archives/ubuntu-release/2020-September/005086.html). 
As it is a dependency for keeping the boot EEPROM on the Raspberry Pi 4 up to 
date, the intention is to install this by default in all pi-related images 
going forward.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1895133

Title:
  [MIR] libraspberrypi-bin libraspberrypi0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1895133/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to