That sounds like a better way than handing over root rights with setuid. I'll put that one in the spice-gtk package I made. Rob 2012/6/12 Manfred Hollstein :

Hi there,

On Mon, 11 Jun 2012, 16:24:21 +0200, Rob Verduijn wrote:

...

Hi all,

I've finally managed to get usbredirection to work with kvm and spice using spicy.

Now I've found out that I can only do this while running spicy as root because it needs access to the devices in /dev/bus/usb/* on the client system.

What would be the smartest way to allow a user to run spicy ? Change the udev rules for the devices or run spicy setuid root ? or another option ?

I'm not sure if this counts as smart, but I have a file /etc/udev/rules.d/50-libusb.rules with the following content for exactly this purpose:

 SUBSYSTEM=="usb", ENV{DEVTYPE}=="usb_device", NAME="bus/usb/$env{BUSNUM}/$env{DEVNUM}", GROUP="usb", MODE="0664"

Every user belonging to group "usb" is then able to do with a USB device what he needs to do.

...

Rob

HTH, cheers.

l8er manfred -- To unsubscribe, e-mail: opensuse-virtual+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-virtual+owner@opensuse.org

-- To unsubscribe, e-mail: opensuse-virtual+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-virtual+owner@opensuse.org