Bug#962102: ITP: ltunify -- Pair and manage Logitech devices that use the unifying receiver

[Anthony Perkins <anthony@acperkins.com>]

On 07/06/2020 23:29, Peter Wu wrote:
> Peter here, author of ltunify. Thank you for your interest :-)

Hi Peter, thank you so much for your work on ltunify. I've found it
immensely useful, and the documentation is very thorough.

> A point to note, both Solaar and ltunify have a udev rule that grants
> the seated user rights to directly control the receiver by making the
> hidraw node accessible to non-root users. I still use this rule myself
> for usability, but more cautious users should note that this also allows
> those users to directly read events such as keystrokes, potentially
> bypassing additional security measures put in place by Wayland for
> example. For most users this should not be a problem, if arbitrary code
> is running as your user, you have more problems to worry about.

Thank you for noting this. I will add this to the README.Debian in case
any users are concerned about it.

> There have some fixes since the 0.2 release, so if it helps I could tag
> a new version.

That would be very useful. At the moment I've pulled in a few patches
that looked like bug fixes since the 0.2 release, but if you could tag a
new version I can just include all the changes and fixes.

Kind regards,
Anthony