From e01a0c680281ae3135de51c7dc1833c65cde7a7c Mon Sep 17 00:00:00 2001
From: Sebastien Bourdeauducq <sb@m-labs.hk>
Date: Mon, 3 Jan 2022 17:24:34 +0800
Subject: [PATCH] nixops: fix spice-client-glib-usb-acl-helper

---
 nixops/desktop.nix | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/nixops/desktop.nix b/nixops/desktop.nix
index 686a399..f4455fd 100644
--- a/nixops/desktop.nix
+++ b/nixops/desktop.nix
@@ -65,8 +65,13 @@ in
   programs.wireshark.enable = true;
   programs.wireshark.package = pkgs.wireshark;
   virtualisation.libvirtd.enable = true;
-  virtualisation.libvirtd.qemuOvmf = true;
-  security.wrappers.spice-client-glib-usb-acl-helper.source = "${pkgs.spice-gtk}/bin/spice-client-glib-usb-acl-helper";
+  virtualisation.libvirtd.qemu.ovmf.enable = true;
+  security.wrappers.spice-client-glib-usb-acl-helper = {
+    source = "${pkgs.spice-gtk}/bin/spice-client-glib-usb-acl-helper";
+    owner = "root";
+    group = "root";
+    setuid = true;
+  };
 
   services.openssh.enable = true;
   services.openssh.forwardX11 = true;