Please provide Ubuntu camera service that integrates with trust-store
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Canonical System Image |
Fix Released
|
Critical
|
John McAleely | ||
| android (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
| qtubuntu-camera (Ubuntu) |
Invalid
|
Critical
|
Unassigned | ||
| qtubuntu-camera (Ubuntu RTM) |
Invalid
|
Critical
|
Unassigned | ||
Bug Description
Currently Ubuntu Touch is using the android camera-service and that is the plan for 13.10.
Going forward in 14.04, the android camera-service will no longer be used and camera access is going to move to the Ubuntu side. There was discussion of either using HAL directly (direct access to devices) or using a camera-service type thing in Ubuntu.
Using devices directly causes at least a few problems:
* can't prevent more than one user from accessing the device at a time
* enumerating camera devices for apparmor policy is extra maintenance for porters
* can't provide a contextual runtime prompt for access (like we (will) do with online accounts, location, microphone). This is particularly important for application confinement.
Instead of direct hardware access, an out of process helper (in relation to the app) can be used to address all of these problems, similar to what pulseaudio does for audio. This service can ensure only one user can access the device at a time and since the service accesses the the device files on the app's behalf, we don't need to enumerate devices in /dev in policy. Furthermore, when an app accesses the service (ideally over DBus), the service can contact trust-store, the trust-store will prompt the user ("Foo wants to access the camera. Is this ok? Yes|No"), then optionally cache the result and return the result to the service. In this manner the user is given a contextual prompt at the time of access by the app. By using caching this decision can be remembered the next time. If caching is used, there should be a method to change the decision in system settings.
If direct hardware access is needed for performance reasons, it is possible to use fd delegation in AppArmor and have the service open the device and pass the fd to the app without having to enumerate the /dev devices. Please talk to jjohansen if pursuing this option.
Lastly, bug #1230391 discusses providing a visual cue during background recording for audio. We will need to do the same for video recording. Feel free to add a task to bug #1230391 if there is work to integrate this new service with that visual cuing.
This should be implemented in time for shippable devices to address the application confinement concern.
<https:/
| Changed in touch-preview-images: | |
| assignee: | nobody → Ricardo Salveti (rsalveti) |
| tags: | added: application-confinement |
| Matthew Paul Thomas (mpt) wrote | #1 |
| description: | updated |
| Changed in touch-preview-images: | |
| assignee: | Ricardo Salveti (rsalveti) → Jim Hodapp (jhodapp) |
| importance: | Undecided → High |
| status: | New → Triaged |
| Changed in qtubuntu-camera (Ubuntu): | |
| status: | New → Triaged |
| importance: | Undecided → High |
| assignee: | nobody → Jim Hodapp (jhodapp) |
| Jamie Strandboge (jdstrand) wrote | #2 |
| Jamie Strandboge (jdstrand) wrote | #4 |
| Jamie Strandboge (jdstrand) wrote | #5 |
| no longer affects: | touch-preview-images |
| Changed in qtubuntu-camera (Ubuntu): | |
| importance: | High → Critical |
| tags: |
added: ota-1 touch-2014-10-23 removed: rtm14 |
| tags: | added: lorcha |
| Changed in qtubuntu-camera (Ubuntu): | |
| assignee: | Jim Hodapp (jhodapp) → nobody |
| Changed in canonical-devices-system-image: | |
| assignee: | nobody → John McAleely (john.mcaleely) |
| milestone: | none → ww34-2015 |
| Changed in qtubuntu-camera (Ubuntu RTM): | |
| status: | New → Triaged |
| importance: | Undecided → Critical |
| Changed in canonical-devices-system-image: | |
| status: | New → Confirmed |
| Changed in canonical-devices-system-image: | |
| importance: | Undecided → High |
| status: | Confirmed → Triaged |
| Changed in qtubuntu-camera (Ubuntu RTM): | |
| status: | Triaged → Invalid |
| Changed in canonical-devices-system-image: | |
| assignee: | John McAleely (john.mcaleely) → Manuel de la Peña (mandel) |
| Changed in qtubuntu-camera (Ubuntu): | |
| assignee: | nobody → Manuel de la Peña (mandel) |
| Changed in qtubuntu-camera (Ubuntu RTM): | |
| assignee: | nobody → Manuel de la Peña (mandel) |
| Changed in canonical-devices-system-image: | |
| assignee: | Manuel de la Peña (mandel) → John McAleely (john.mcaleely) |
| John McAleely (john.mcaleely) wrote | #7 |
| Changed in canonical-devices-system-image: | |
| status: | Triaged → In Progress |
| Changed in canonical-devices-system-image: | |
| importance: | High → Critical |
| Jamie Strandboge (jdstrand) wrote | #8 |
| John McAleely (john.mcaleely) wrote | #9 |
| Changed in android (Ubuntu): | |
| status: | New → Fix Released |
| Changed in qtubuntu-camera (Ubuntu): | |
| status: | Triaged → Invalid |
| assignee: | Manuel de la Peña (mandel) → nobody |
| Changed in qtubuntu-camera (Ubuntu RTM): | |
| assignee: | Manuel de la Peña (mandel) → nobody |
| John McAleely (john.mcaleely) wrote | #10 |
| John McAleely (john.mcaleely) wrote | #11 |
| Changed in canonical-devices-system-image: | |
| status: | In Progress → Fix Committed |
| Changed in canonical-devices-system-image: | |
| status: | Fix Committed → Fix Released |
Specification updated. <https:/