Using any of software (like gnome-boxes, ...) using spice-gtk (R2947) , USB redirection to guest OS fails. This is because one of the helpers has not setuid bit.
The Issue appears while spice-gtk is build with polkit support, as says a note in the source package.
Steps to Reproduce:
- Use non-root user login system.
- Launch virt-manager, input password for authentication. Or gnome-boxes, or any software that uses spice-gtk
- Configure a guest and try usb redirection in settings.
- Error shows:
spice-client-glib-usb-helper: Error setting facl: Operation not permitted
Workaround:
setuid (chmod 4755) the file /usr/lib64/spice-gtk/spice-client-glib-usb-acl-helper
The Fedora project does it here, line 166 of their spec:
https://src.fedoraproject.org/rpms/spice-gtk//blob/rawhide/f/spice-gtk.spec#_166
Same issue appeared in Arch:
https://bugs.archlinux.org/task/69428
Resolved by commit:
https://github.com/archlinux/svntogit-community/commit/206238fa474bcbb7fe4621ff310a2a78887f380c#diff-3e341d2d9c67be01819b25b25d5e53ea3cdf3a38d28846cda85a195eb9b7203a
However, one can use other means than setuid to fix this issue, using capapiblity «cap_fowner»:
https://gitlab.freedesktop.org/spice/spice-gtk/-/merge_requests/42
Thanks.