Debian build: Install `gpio' setuid root, and world-executable.

[wiringPi.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 6f0dec768abec8ad495466c5a1aac7b7f782fe24..082468635ecf309ac0b01d32777ea09f88e8998e 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -4,6 +4,11 @@ wiringpi (2.28~iwj1) unstable; urgency=medium
     build; provide the old style build as `./build debian-template'
   * Have `wiringpi' be a metapackage, and use `wiringpi-tools' as
     the name of the command line tool package.
+  * Install `gpio' setuid root, and world-executable.  Given that `gpio'
+    doesn't take the kind of precations necessary to avoid offering
+    vulnerabilities, this probably enables all programs on the pi to
+    become root.  However, we do this to avoid howls of protest from users
+    whose cgi programs may no longer work, etc.
 
  --