Hi, I'm reopening this bug since it doesn't fix the device permissions for the auto connect scenario but only for the "connect before domain start" scenario. Implementing managed mode in libvirt is in the works (see the referenced upstream bug) - until then a udev rule is the best woraround. Cheers, -- Guidio