If I tell applications like VLC or Audacity to record from my webcam or microphone, they just wake the hardware if sleeping and do their work without my interference.
Although this is a good thing, I've always wondered, due to privacy concerns: is there a way to restrict applications access to a hardware device? Many times I need to run non-free software, and most of them from companies I know I shouldn't trust.
While writing this, I came up with the idea of using something like SELinux or AppArmor to restrict access to
/dev/something. Is this possible? Could there be a better or easier way?
Also, is there any more hardware besides the webcam and microphone that I should be concerned about (in terms of privacy)?