I would like to restrict the access to the webcam only to certain programs/users. I use Ubuntu 16.04.
If I am right my webcam is linked with /dev/video0 (just as an example), which is owned by root and group video. However group "video" doesn't show up invoking command
groups and doesn't seem used anymore by systemd, using command
grep 'video' /etc/group no user is in fact reported to be in the group.
As far as I understand I can now use udev rules, but I don't understand how to use it, if
video0 belongs to root, why at the moment am I able to open the camera without being root using any program?
It should not possible in my mind..what am I missing?
ls -l /dev/video0
crw-rw----+ 1 root video 81, 0 apr 18 10:39 /dev/video0
getfacl: Removing leading '/' from absolute path names # file: dev/video0 # owner: root # group: video user::rw- user:rok:rw- group::rw- mask::rw- other::---