Bug 1072029

Summary:	USB redirection is not working in spice
Product:	[openSUSE] openSUSE Distribution	Reporter:	Marco M. <jjletho67-esus>
Component:	Virtualization:Tools	Assignee:	virt-bugs list <virt-bugs>
Status:	RESOLVED DUPLICATE	QA Contact:	E-mail List <qa-bugs>
Severity:	Normal
Priority:	P5 - None	CC:	cbosdonnat
Version:	Leap 42.3
Target Milestone:	---
Hardware:	Other
OS:	Other
Whiteboard:
Found By:	---	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Marco M. 2017-12-09 16:55:58 UTC

It's not possible to redirect USB devices through the virt-manager/spice client (local connection)

When I select "Redirect USB Device" in the "Virtual Machine" menu, polkit ask me for root password. After entering the password I obtain the following errror: " Could not redirect [USB DEVICE NAME]: Error setting USB device node ACL: 'Error setting facl: Operation not permitted' (0)"

In this thread (post #9) I found a workaround:

https://forums.opensuse.org/showthread.php/501434-Can-t-redirect-USB-to-QEMU-KVM-guest

The workaround consist of adding setuid permission to /usr/bin/spice-client-glib-usb-acl-helper

Is this the right and only way to obtain USB redirection? If yes i think setuid should be set by default.

Comment 1 Cédric Bosdonnat 2017-12-11 08:13:09 UTC

(In reply to Marco M. from comment #0)
> The workaround consist of adding setuid permission to
> /usr/bin/spice-client-glib-usb-acl-helper
> 
> Is this the right and only way to obtain USB redirection? If yes i think
> setuid should be set by default.

Security doesn't agree. See bug #744251

*** This bug has been marked as a duplicate of bug 744251 ***