Public bug reported:

Version:

chromium                 87.0.4280.66                 1411


Steps to reproduce:

1. Have Chromium snap, with raw-usb plug disconnected.
2. Open Chromium and try to use a webpage that has webusb.

Result:

USB.getDevices() and USB.requestDevice() will succeed but
USBDevice.open() will fail, emitting "DOMException: Permission Denied"
on the browser console. Or, put another way, you can select a USB device
that you want the webpage to use, but it is impossible for the webpage
to actually use it.

Why this happens:

Chromium enumerates USB devices by querying udev. It does not require
elevated permissions beyond the snap defaults in order to do this. So it
can retrieve a list of USB devices even without raw-usb.

Impact:

It is impossible to access the USB devices until the raw-usb plug is
connected. However, to a normal user, it appears that Chromium already
has USB permissions because it can enumerate devices. The webusb API is
in a confusing, partially-working state, and there is nothing to
indicate that Chromium needs additional permissions in order for it to
fully work.

** Affects: chromium-browser (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1905457

Title:
  [snap] Chromium can enumerate USB devices without the raw-usb plug

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1905457/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to