From: Ian Jackson <ijackson@chiark.greenend.org.uk>
Date: Sat, 26 Sep 2015 00:15:18 +0000 (+0000)
Subject: Debian build: Install `gpio' setuid root, and world-executable.
X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=wiringPi.git;a=commitdiff_plain;h=2f86ed073b14a5faae4b9b45bd94f22abd96555f

Debian build: Install `gpio' setuid root, and world-executable.

Given that `gpio' doesn't take the kind of precations necessary to
avoid offering vulnerabilities, this probably enables all programs on
the pi to become root.  However (as requested by gpio upstream) we do
this to avoid howls of protest from users whose cgi programs may no
longer work, etc.

Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
---

diff --git a/debian/changelog b/debian/changelog
index 6f0dec7..0824686 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -4,6 +4,11 @@ wiringpi (2.28~iwj1) unstable; urgency=medium
     build; provide the old style build as `./build debian-template'
   * Have `wiringpi' be a metapackage, and use `wiringpi-tools' as
     the name of the command line tool package.
+  * Install `gpio' setuid root, and world-executable.  Given that `gpio'
+    doesn't take the kind of precations necessary to avoid offering
+    vulnerabilities, this probably enables all programs on the pi to
+    become root.  However, we do this to avoid howls of protest from users
+    whose cgi programs may no longer work, etc.
 
  --
 
diff --git a/debian/rules b/debian/rules
index 423a473..5377918 100755
--- a/debian/rules
+++ b/debian/rules
@@ -45,5 +45,11 @@ override_dh_auto_install:
 			debian/libwiringpi-dev/usr/lib/$$l.so; \
 	done
 
+override_dh_fixperms:
+	dh_fixperms
+	set -e; b=debian/wiringpi-tools/usr/bin/gpio; \
+	chown root.root $$b; \
+	chmod 4755 $$b
+
 %:
 	dh $@