Linux - SecurityThis forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Physical switches, such as tape, work for the camera.
Devices are just files. So if you want to make a big production of it you can look at AppArmor and build some profiles for your applications. If there are already profiles, then you could adjust them to block the camera. Either way, submit the profiles to your distro's maintainers.
Most of us know tape will cover the webcam, but what about microphone? Laptops only have Headphone ports these days and even plugging ones with mic port will not disable the internal one. I'm asking for a way to stop or block an application to access the webcam including the audio. AppArmor is what I'm looking for, but seems a bit complicated. Is there an equivalent to AppArmor on Mac or Windows? What does modprobe -r uvcvideo mean?
Have you looked at BIOS? Some BIOSes allow disabling USB and other hardware...
Only thing I have with disabling at OS layer is next update may reenable the device.
So, in past, I physically disconnected the device (granted that requires taking apart a laptop, which isn't everyone's cup of tea).
I physically disconnected the device (granted that requires taking apart a laptop, which isn't everyone's cup of tea).
Quote:
Originally Posted by klerg
Most of us know tape will cover the webcam, but what about microphone? Laptops only have Headphone ports these days and even plugging ones with mic port will not disable the internal one. I'm asking for a way to stop or block an application to access the webcam including the audio. AppArmor is what I'm looking for, but seems a bit complicated. Is there an equivalent to AppArmor on Mac or Windows? What does modprobe -r uvcvideo mean?
Besides tape, there are are no other guarantees beyond taking it out as dc.901 mentions.
You seem to be looking for a guaranteed software option. There are plenty which can disable it, however there also are plenty which can invasively try to use it against your wishes, and those will attempt to subvert anything else done to lock or disable.
Sorry but your next level is asking how you can trust some software change or tool worked. There would be many opinions, but no concrete answer.
Blacklist, disable, or modprobe -r uvcvideo is not an option as they will shut off the webcam to every application. Also, disabling the webcam in BIOS will cut it off from everything.
Quote:
Originally Posted by rtmistler
You seem to be looking for a guaranteed software option. There are plenty which can disable it, however there also are plenty which can invasively try to use it against your wishes, and those will attempt to subvert anything else done to lock or disable
I'm looking for all software options, either guaranteed or not. Let me know the ones that use and take control of my webcam. What are the names of most of these 'plenty' that you mention.
Quote:
Originally Posted by rtmistler
Sorry but your next level is asking how you can trust some software change or tool worked. There would be many opinions, but no concrete answer.
Yes that is the next question to ask. How is it these software or tools are able to block or stop an application to access camera? I'm interested to know all opinions and will decide what best suits me.
Yes that is the next question to ask. How is it these software or tools are able to block or stop an application to access camera? I'm interested to know all opinions and will decide what best suits me.
They don't block anything. They may simply choose not to use the camera despite having it available. Or worse, choose to report not using it despite taking a peek anyway.
If you wish to block, I still say your best bet is AppArmor. Which distro is this for?
That's probably the most complete guide there but if you are using something other than Ubuntu, the paths will likely be different. It takes a little time and effort to get up to speed on AppArmor but it not hard once you get familiar with how to debug.
They don't block anything. They may simply choose not to use the camera despite having it available. Or worse, choose to report not using it despite taking a peek anyway.
That brings us to an important question: how to actually test and check that these software and tools actually block an app or service from using the webcam? Or how to know the webcam is not in use besides the light being off?
Quote:
Originally Posted by Turbocapitalist
If you wish to block, I still say your best bet is AppArmor. Which distro is this for?
I have Slackware, but also Ubuntu and will start there to see how AppArmor works. On a related note, is there anything like AppArmor on Mac and Windows?
Quote:
Originally Posted by Turbocapitalist
That's probably the most complete guide there but if you are using something other than Ubuntu, the paths will likely be different. It takes a little time and effort to get up to speed on AppArmor but it not hard once you get familiar with how to debug.
I hope it's not too different for Slackware I'm guessing the installation will be the biggest issue to deal with.
If I owned a device like a webcam and I wanted to be sure it wasn't able to be used by any means, I'd remove the usb plug from the computer. The built in is more difficult. Tape is an idea suggested already.
You have to assume that a hacker might be able to bypass anything less than physical intervention.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
