Re: camera detection with the Zoom client

2021-09-21 Thread Vincent Lefevre 
On 2021-09-21 09:50:37 +0100, piorunz wrote:
> firejail is blocking access to USB devices or other peripherals by
> default, correct?

Well, not in Debian 11 (bullseye), but this is now the intent with
the current version in Debian/unstable, and I wasn't aware of this
(no announce in Debian's NEWS file).

BTW, this blocking does not work for the audio input. I've just
reported a bug: https://github.com/netblue30/firejail/issues/4565

And in Debian:
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=994818

> If it wasn't in the past, I'd say that's a security vulnerability
> being fixed, not a regression.

Well, that's a regression, because the default profile was regarded
as allowed to be access devices in the recent past. This is no longer
the case. But shouldn't such an important change (as intentional) be
announced?

> See if you can tweak your firejail profile to allow camera.

I can just add the --ignore=novideo option.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Re: camera detection with the Zoom client

2021-09-21 Thread piorunz 

On 21/09/2021 09:37, Vincent Lefevre wrote:

On 2021-09-21 10:15:03 +0200, Vincent Lefevre wrote:

A few months ago, my webcam could be detected by the Zoom client.
But this is no longer the case. When trying the zoom test meeting,
I can't select any camera (I get "All cameras have been tested" /
"Select Camera" / "Tested 0/0"), and after going to the next test,
the camera isn't available. My machine is under Debian/unstable.

Any idea?

Note: no issues from Firefox, but the CNRS in France blocks
Zoom connections from web browsers and requires the Zoom client.


Hmm... I'm using firejail, and there is the same issue with cheese.
Thus this seems to be a regression in firejail.


firejail is blocking access to USB devices or other peripherals by
default, correct? If it wasn't in the past, I'd say that's a security
vulnerability being fixed, not a regression.

See if you can tweak your firejail profile to allow camera. I use
several firejail profiles, some of them with access to LAN etc, but for
access to USB devices like Bitcoin hardware wallet, I disable firejail
(use non-firejail separate profile just with one webpage), because I
didn't know how to allow just that and nothing else. Please share if you
find something, if could be useful.

--
With kindest regards, Piotr.

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄

Re: camera detection with the Zoom client

2021-09-21 Thread Vincent Lefevre 
On 2021-09-21 10:37:39 +0200, Vincent Lefevre wrote:
> Hmm... I'm using firejail, and there is the same issue with cheese.
> Thus this seems to be a regression in firejail.

However, using firejail with --profile=zoom solves the issue.

But I wonder why this is needed.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Re: camera detection with the Zoom client

2021-09-21 Thread Vincent Lefevre 
On 2021-09-21 10:15:03 +0200, Vincent Lefevre wrote:
> A few months ago, my webcam could be detected by the Zoom client.
> But this is no longer the case. When trying the zoom test meeting,
> I can't select any camera (I get "All cameras have been tested" /
> "Select Camera" / "Tested 0/0"), and after going to the next test,
> the camera isn't available. My machine is under Debian/unstable.
> 
> Any idea?
> 
> Note: no issues from Firefox, but the CNRS in France blocks
> Zoom connections from web browsers and requires the Zoom client.

Hmm... I'm using firejail, and there is the same issue with cheese.
Thus this seems to be a regression in firejail.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

camera detection with the Zoom client

2021-09-21 Thread Vincent Lefevre 
A few months ago, my webcam could be detected by the Zoom client.
But this is no longer the case. When trying the zoom test meeting,
I can't select any camera (I get "All cameras have been tested" /
"Select Camera" / "Tested 0/0"), and after going to the next test,
the camera isn't available. My machine is under Debian/unstable.

Any idea?

Note: no issues from Firefox, but the CNRS in France blocks
Zoom connections from web browsers and requires the Zoom client.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)