in this branch the gstv4l2 plugin issue disappears https://build.opensuse.org/repositories/home:chorler:branches:REQUEST_532678 - the "cost" is bind, setsockopt, AF_NETLINK socket / (and possibly not necessary socketpair) ... it then crashes in execve when attempting to launch gst-plugin-scanner (just added execve to the above to test if that is the "last" problem) My feeling is proceeding like this we're undoing the intent of the security model implemented in tracker. On the otherhand, if the rest of the system is incompatible with that... I'd say either a way to disable plugins is required, or a more permissive approach is required.