(In reply to James Fehlig from comment #3) > I thought libvirt had a straggler, but if so I can't find it now. Perhaps > I'm thinking of an old lxc tool. I also quickly checked sanlock, vhostmd, > xen, and qemu and only found /usr/lib/qemu-bridge-helper from the qemu-tools > package. That one tool is already in the kvm group... I think I'll add the spice-client-glib-usb-acl-helper in either the libvirt or the kvm group. May be the kvm one would be better since users may get KVM + spice without libvirt. (In reply to James Fehlig from comment #3) > One package I didn't check, but assume you know something about, is > libguestfs :-). Just checked, but libguestfs has no setuid bit set and nothing where that would be needed.