Skip to content

docs(stereo-camera): installer rules for the consent-delegating registration - #1833

Merged
dfattal merged 1 commit into
mainfrom
docs/stereo-camera-delegating-installer
Oct 6, 2026
Merged

dfattal merged 1 commit into
mainfrom
docs/stereo-camera-delegating-installer

Conversation

@dfattal

@dfattal dfattal commented Oct 6, 2026 •

Copy link
Copy Markdown
Collaborator

Stacked on #1819 (feat/stereo-camera-r3). Doc-only, one file: docs/guides/stereo-camera-consent.md §4 gains a Writing the registration from an installer subsection, so a third-party browser or app can write the delegating entry safely.

The rules come from the code as built:

  • Register the executable the runtime sees: the OS-derived image path of the process that opens the stream (QueryFullProcessImageNameW, /proc/<pid>/exe, proc_pidpath).
  • Trust is by full path only (this version has no signer or hash check). So register only admin- or root-protected directories, and register nothing for a user-writable install location.
  • Protect the entry itself. The POSIX system file's ownership and mode are not checked by the runtime.
  • Windows: use the 64-bit view, use your product name as the value name, and keep the path ASCII and under the reader's 256/1024 buffers.
  • POSIX: read-modify-write the shared JSON file.
  • On uninstall, remove only your own entry.
  • No service restart is needed.
  • Delegation is §7.1 step 4, so it skips the Windows camera switch (step 5) and a stored Deny (step 6).

First consumer: the browser's installer, DisplayXR/displayxr-browser-pvt#241 (installer-only).

The R3 branch is being rebased right now. After it lands, this one commit cherry-picks cleanly.

🤖 Generated with Claude Code

Base automatically changed from feat/stereo-camera-r3 to main October 6, 2026 08:03
…tration

The guide said where a delegating client's installer writes its entry but
not how to write it safely. Add the rules that follow from the code as
built: register the OS-derived peer image path; trust is by path only, so
register only admin-protected locations; protect the entry itself; 64-bit
registry view, free value name, ASCII + buffer limits of the current
reader; POSIX read-modify-write of the shared file; uninstall removes only
your own entry; no service restart; and what delegation bypasses (the
Windows camera switch and a stored Deny, steps 5-6).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@dfattal
dfattal force-pushed the docs/stereo-camera-delegating-installer branch from cee65fd to 6ac8133 Compare October 6, 2026 08:04
@dfattal
dfattal marked this pull request as ready for review October 6, 2026 09:17
@dfattal
dfattal requested a review from a team as a code owner October 6, 2026 09:17
@dfattal
dfattal merged commit 5c38928 into main Oct 6, 2026
34 checks passed
@dfattal
dfattal deleted the docs/stereo-camera-delegating-installer branch October 6, 2026 09:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant