1077351 – Can't redirect USB to QEMU-KVM guest

Bug 1077351 - Can't redirect USB to QEMU-KVM guest

Summary: Can't redirect USB to QEMU-KVM guest

Status:	RESOLVED DUPLICATE of bug 744251

Alias:	None

Product:	openSUSE Distribution
Classification:	openSUSE
Component:	KVM (show other bugs)
Version:	Leap 42.3
Hardware:	x86-64 openSUSE 42.3

Priority:	P5 - None Severity: Normal with 5 votes (vote)
Target Milestone:	---
Assignee:	Liang Yan
QA Contact:	E-mail List

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Clone This Bug

Reported:	2018-01-24 06:56 UTC by Dead Mozay
Modified:	2018-03-30 17:30 UTC (History)
CC List:	2 users (show)

See Also:
Found By:	---
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Dead Mozay 2018-01-24 06:56:08 UTC

Basically what i'm trying to do is to redirect connected to my system (host) USB drive to (qemu-kvm) virtual guest machine. From virtual machine viewer menu i select "Virtual Machine" -> " Redirect USB". Immediately i get list of all present USB devices, and the moment i chose one i get pop up window "USB redirection error" with following information:
Could not redirect device name [dev:id] at 3-6: Failed to execute child process "/usr/bin//spice-client-glib-usb-acl-helper" (No such file or directory) (8)
User is included in all required groups (qemu,kvm,libvirt).

The solution
chmod u+s /usr/bin/spice-client-glib-usb-acl-helper

/usr/share/polkit-1/actions/org.spice-spice.lowlevelusbaccess.policy

<allow_any>auth_admin</allow_any>
<allow_inactive>no</allow_inactive>
<allow_active>auth_admin</allow_active>

replace with

<allow_any>yes</allow_any>
<allow_inactive>no</allow_inactive>
<allow_active>yes</allow_active>

only then starts forwarding.

Comment 1 Dead Mozay 2018-02-15 09:29:47 UTC

Run virt-manager --debug
spice-client-glib-usb-helper: Error setting facl: Operation not permitted

https://bugzilla.redhat.com/show_bug.cgi?id=1005009

Comment 2 Liang Yan 2018-03-30 17:30:15 UTC

Thanks for the report. 
Dig for a while and found sbit is disabled here for a security  reason, and won't be allowed for a while. Update please check #744251. Thanks. 

Close here, feel free to reopen it if necessary.

*** This bug has been marked as a duplicate of bug 744251 ***