Comment 3 for bug 60273

I'm investigating options to allow qemu/kvm safe access to the USB devices.

The options seem to be (in increasing order of complexity:

1. Modify the udev rule as described here but as a general change to udev is not really a general solution for a pre-packaged solution.
2. Add a wrapper script to the qemu & kvm packages that adds the udev modification just whilst qemu/kvm is running, and removes it after.
3. Add a USB daemon to the qemu/kvm package that runs as root and communicates over dbus with the qemu/kvm user process.