[opensuse-virtual] finally I got usbredirection, now spicy needs usb access for users
Hi all, I've finally managed to get usbredirection to work with kvm and spice using spicy. Now I've found out that I can only do this while running spicy as root because it needs access to the devices in /dev/bus/usb/* on the client system. What would be the smartest way to allow a user to run spicy ? Change the udev rules for the devices or run spicy setuid root ? or another option ? Rob -- To unsubscribe, e-mail: opensuse-virtual+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-virtual+owner@opensuse.org
Hi there, On Mon, 11 Jun 2012, 16:24:21 +0200, Rob Verduijn wrote:
Hi all,
I've finally managed to get usbredirection to work with kvm and spice using spicy.
Now I've found out that I can only do this while running spicy as root because it needs access to the devices in /dev/bus/usb/* on the client system.
What would be the smartest way to allow a user to run spicy ? Change the udev rules for the devices or run spicy setuid root ? or another option ?
I'm not sure if this counts as smart, but I have a file /etc/udev/rules.d/50-libusb.rules with the following content for exactly this purpose: SUBSYSTEM=="usb", ENV{DEVTYPE}=="usb_device", NAME="bus/usb/$env{BUSNUM}/$env{DEVNUM}", GROUP="usb", MODE="0664" Every user belonging to group "usb" is then able to do with a USB device what he needs to do.
Rob
HTH, cheers. l8er manfred -- To unsubscribe, e-mail: opensuse-virtual+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-virtual+owner@opensuse.org
That sounds like a better way than handing over root rights with setuid. I'll put that one in the spice-gtk package I made. Rob 2012/6/12 Manfred Hollstein <mhollstein@t-online.de>:
Hi there,
On Mon, 11 Jun 2012, 16:24:21 +0200, Rob Verduijn wrote:
Hi all,
I've finally managed to get usbredirection to work with kvm and spice using spicy.
Now I've found out that I can only do this while running spicy as root because it needs access to the devices in /dev/bus/usb/* on the client system.
What would be the smartest way to allow a user to run spicy ? Change the udev rules for the devices or run spicy setuid root ? or another option ?
I'm not sure if this counts as smart, but I have a file /etc/udev/rules.d/50-libusb.rules with the following content for exactly this purpose:
SUBSYSTEM=="usb", ENV{DEVTYPE}=="usb_device", NAME="bus/usb/$env{BUSNUM}/$env{DEVNUM}", GROUP="usb", MODE="0664"
Every user belonging to group "usb" is then able to do with a USB device what he needs to do.
Rob
HTH, cheers.
l8er manfred -- To unsubscribe, e-mail: opensuse-virtual+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-virtual+owner@opensuse.org
-- To unsubscribe, e-mail: opensuse-virtual+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-virtual+owner@opensuse.org
On Tuesday 12 June 2012 11.05:33 Rob Verduijn wrote:
That sounds like a better way than handing over root rights with setuid. I'll put that one in the spice-gtk package I made.
Rob
Rob any news about your spice-gtk integration ? Will it be available in Virtualization: repo or .... Don't answer if you are on holiday :-) -- Bruno Friedmann Ioda-Net Sàrl www.ioda-net.ch openSUSE Member & Ambassador GPG KEY : D5C9B751C4653227 irc: tigerfoot -- To unsubscribe, e-mail: opensuse-virtual+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-virtual+owner@opensuse.org
participants (3)
-
Bruno Friedmann
-
Manfred Hollstein
-
Rob Verduijn