wminput should provide udev rule

This patch should add a rule as outlined in the manpage.

Apparently this is something better handled by the udev package itself, in which case, something smarter may be needed than the above rule.

Please justify why uinput can be world-readable and writable; what does the device do? What are the security implications?

From the kernel uinput.c:
* User level driver support for input subsystem

wminput is used to make the mouse cursor controllable by a Wiimote connected via bluetooth. The security implications are unclear to me. I happen to know that the device is also used for thinkfinger, which will be pulled in via Debian upstream soon. Would it be more appropriate to create a new user group akin to the fuse module group? If not, I'm afraid the packaged README suggests two insecure approaches likely to be used by anyone installing this package, as it's required.

After speaking with cjwatson on this, I think it may be simpler and wiser to advise users to run wminput via sudo. Newer versions in upstream have a better approach that alter related functionality anyways.

This implies to me that any user could insert input events to your X server, and thus click on any part of the screen, etc.

These permissions are definitely inappropriate.

If you're having permission problems with wminput, run with sudo. The README's solution is insecure and future work appears to take a much smarter approach.