1548862 - OSX Mojave (10.14) fails to run webrtc tests with a prompt asking for run-generic-worker.sh to access the camera

Status: RESOLVED WORKSFORME

(Infrastructure & Operations :: RelOps: General, task)

Description

[Joel Maher ( :jmaher ) (UTC -8)]

from irc:
11:48
<jmaher> dividehex: on the osx mojave machines, do we setup a fake camera/mic? some tests that request to use these are failing
11:50
<jmaher> possibly we did on the osx10.10 machines and are not on 10.14- maybe we are and it isn't working
11:52
<dividehex> jmaher: I don't know of any fake camera/mic software that would have been installed on osx10.10. I went through the packages that were being installed on osx10.10 and I didin't see anything of the sort.
11:53
<jmaher> dividehex: I see: https://taskcluster-artifacts.net/MASIoiTBRW-_vLoB02w9-Q/0/public/test_info/mozilla-test-fail-screenshot__ZX6GB.png
11:53
<dividehex> jmaher: do you know the name of the software that would have been used?
11:53
<jmaher> and it appears that is the problem with all the webrtc tests that try to access the camera
11:53
<jmaher> I don't
11:53
<jmaher> let me look in a log, thatmight have info
11:54
<dividehex> ahh that looks more like a permissions issue with the OS
11:54
<dividehex> maybe mojave requires explicit perms to access hardware
11:55
<jmaher> I see: TEST DEVICES: No test devices found (in media.{audio,video}_loopback_dev, using fake streams.
11:55
<jmaher> but I also see that in a 10.14 log: TEST DEVICES: No test devices found (in media.{audio,video}_loopback_dev, using fake streams.
12:03
<jmaher> dividehex: looking at that screenshot it looks as if generic worker needs permissions to access the camera- any ideas on how to do that?
12:03
<jmaher> looking in the code it is hard to tell a fake or loopback device
12:11
<dividehex> jmaher: it looks like we will need to create profile to whitelist the generic worker wrapper script. But it also looks like the script will need to be codesigned to do so. :(
12:11
<jmaher> dividehex: I wonder if the permissions changed from 10.10 to 10.14 and what is working for generic worker (and related subprocesses) to access the camera isn't now
12:12
<dividehex> jmaher: yes. that is what is happening. Mojave has a ton of new privacy and security features
12:12
<jmaher> dividehex: what is codesigned? is that authenticating the script orsomething?
12:12
<gbrown> wcosta: thanks. just checking!
12:13
<dividehex> jmaher: it means it must be signed by an apple cert
12:13
<jmaher> ack
12:13
<dividehex> I have an installer certificate. I'm not sure that will work and i'm not sure how to sign a bash script

Comment 1

[Mark Cornmesser [:markco] OOO 2024/04/15]

jmaher: Is this still an issue that needs to be addressed?

Comment 2

[Joel Maher ( :jmaher ) (UTC -8)]

I am pretty sure this is all good.