jdstrand said we need to add these to the apparmor profile for browser:
/dev/video[0-9]* rw, /sys/bus/usb/devices/ r, /sys/devices/pci**/usb*/**/idVendor r, /sys/devices/pci**/usb*/**/idProduct r, /run/udev/data/c81:[0-9]* r, # video4linux (/dev/video*, etc) /sys/ r, /sys/bus/ r, /sys/class/ r, /sys/devices/ r, /sys/devices/**/ r, /sys/class/ r, /sys/class/**/ r,
basically, it should use the camera policy group, but it may need to be adjusted for things like that ^ after someone has gone through all the needed accesses
jdstrand said we need to add these to the apparmor profile for browser:
/dev/video[0-9]* rw, usb/devices/ r, pci**/usb* /**/idVendor r, pci**/usb* /**/idProduct r, data/c81: [0-9]* r, # video4linux (/dev/video*, etc)
/sys/bus/
/sys/devices/
/sys/devices/
/run/udev/
/sys/ r,
/sys/bus/ r,
/sys/class/ r,
/sys/devices/ r,
/sys/devices/**/ r,
/sys/class/ r,
/sys/class/**/ r,
basically, it should use the camera policy group, but it may need to be adjusted for things like that ^ after someone has gone through all the needed accesses