Camera Access Failure on macOS 15 with MDM DNS Filtering Enabled

Browser Support Desktop Support
,
1

Description of the issue:
On Apple Silicon MacBooks running the latest macOS 15, Brave Browser (recent incl. the latest Release versions) with new empty profile fail to access the connected camera devices despite correct site and browser permissions. The issue arises immediately after deploying an MDM configuration profile for “DNS Filtering,” which disables Brave’s BuiltInDnsClientEnabled flag, forcing reliance on macOS’s DNS Network Proxy extension added by the MDM (Mosyle Fuse) and tuning up some associated config.params like disabling the iCloud Private Relay

Steps to Reproduce:

  1. Deploy the MDM profile enforcing DNS Filtering (XML data available upon request)
  2. Grant camera permissions to Brave Browser and a test site (e.g., Google Meet or https://webcamtests.com/).
  3. Attempt to access the camera via Brave on the test site

Expected result:
Camera streams successfully, as observed in other browsers (Chrome, Safari, Firefox).

Brave Version( check About Brave):
Version 1.78.94 Chromium: 136.0.7103.60 (Official Build) (arm64)

Additional Information:
macOS 15.4.1 Build 24E263
the dump of MDM configuration profiles in XML is available upon request

2

@bohemian11

Detailing your issue, so I can see the structure and dominos (A causing B, etc.):

Apple Silicon MacBooks running the latest macOS 15, Brave Browser (latest v.), with new empty profile, fails to access the connected camera devices.

Given that your “new empty profile” is not apparently empty - your having set:

  • correct site and browser permissions
  • MDM (Apple’s Mobile Device Management) configuration profile for “DNS Filtering”

And you have determined that MDM configuration:

  • disables Brave’s BuiltInDnsClientEnabled flag
  • forces reliance on macOS’s DNS Network Proxy extension [that is] added by the MDM (Mosyle Fuse)
  • [apparently] “tuning up” some associated config.params like: disabling the iCloud Private Relay

Is that a good outline, for your issue?

3

Not sure what’s your goal here.

The term “new empty profile” is relative. I believe the MDM config.changes and permission settings are global and not user profile specific, but I don’t have expertise to evaluate it. Just guessing.