New Android P Commit Suggests Idle Apps Will Have No Camera Access
Based on a new commit found in the Android code review repository, it looks like Android P is going to have a significant security improvement built into it. The commit suggests that idle apps will no longer have access to the camera and it looks like it will be universal across all apps.
If a UID is idle (being in the background for more than cartain (sp) amount of time) it should not be able to use the camera. If the UID becomes idle we generate an eror (sp) and close the cameras for this UID. If an app in an idle UID tries to use the camera we immediately generate an error. Since apps already should handle these errors it is safe to apply this policy to all apps to protect user privacy.
Today, a rogue app could access your camera without you knowing, even if that app is running in the background.