Public bug reported:
Version:
chromium 87.0.4280.66 1411
Steps to reproduce:
1. Have Chromium snap, with raw-usb plug disconnected.
2. Open Chromium and try to use a webpage that has webusb.
Result:
USB.getDevices() and USB.requestDevice() will succeed but
USBDevice.open() will fail, emitting "DOMException: Permission Denied"
on the browser console. Or, put another way, you can select a USB device
that you want the webpage to use, but it is impossible for the webpage
to actually use it.
Why this happens:
Chromium enumerates USB devices by querying udev. It does not require
elevated permissions beyond the snap defaults in order to do this. So it
can retrieve a list of USB devices even without raw-usb.
Impact:
It is impossible to access the USB devices until the raw-usb plug is
connected. However, to a normal user, it appears that Chromium already
has USB permissions because it can enumerate devices. The webusb API is
in a confusing, partially-working state, and there is nothing to
indicate that Chromium needs additional permissions in order for it to
fully work.
** Affects: chromium-browser (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to chromium-browser in Ubuntu.
https://bugs.launchpad.net/bugs/1905457
Title:
[snap] Chromium can enumerate USB devices without the raw-usb plug
Status in chromium-browser package in Ubuntu:
New
Bug description:
Version:
chromium 87.0.4280.66 1411
Steps to reproduce:
1. Have Chromium snap, with raw-usb plug disconnected.
2. Open Chromium and try to use a webpage that has webusb.
Result:
USB.getDevices() and USB.requestDevice() will succeed but
USBDevice.open() will fail, emitting "DOMException: Permission Denied"
on the browser console. Or, put another way, you can select a USB
device that you want the webpage to use, but it is impossible for the
webpage to actually use it.
Why this happens:
Chromium enumerates USB devices by querying udev. It does not require
elevated permissions beyond the snap defaults in order to do this. So
it can retrieve a list of USB devices even without raw-usb.
Impact:
It is impossible to access the USB devices until the raw-usb plug is
connected. However, to a normal user, it appears that Chromium already
has USB permissions because it can enumerate devices. The webusb API
is in a confusing, partially-working state, and there is nothing to
indicate that Chromium needs additional permissions in order for it to
fully work.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1905457/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
