It is not a legal bar, it's simply considered safe corporate HR practice to automatically delete any resumes with picture attachments before they are viewed so that the pictures cannot possibly form the justiifcation for an employment discrimination lawsuit (i.e., choosing not to hire based on race/age/gender).

IOW, you can include a photograph on your resume, but the likely result of sending that resume to a large corporation is that it will be deleted immediately.