diff -Naurp libvirt-0.9.12.orig/src/network/bridge_driver.c libvirt-0.9.12/src/network/bridge_driver.c
--- libvirt-0.9.12.orig/src/network/bridge_driver.c	2012-03-09 02:33:16.000000000 -0500
+++ libvirt-0.9.12/src/network/bridge_driver.c	2012-05-16 10:53:34.754099221 -0400
@@ -485,6 +485,11 @@ networkBuildDnsmasqArgv(virNetworkObjPtr
      */
 
     /*
+     * Run as user libvirt-dnsmasq
+     */
+    virCommandAddArgList(cmd, "-u", "libvirt-dnsmasq", NULL);
+
+    /*
      * Needed to ensure dnsmasq uses same algorithm for processing
      * multiple namedriver entries in /etc/resolv.conf as GLibC.
      */
diff -Naurp libvirt-0.9.12.orig/tests/networkxml2argvdata/isolated-network.argv libvirt-0.9.12/tests/networkxml2argvdata/isolated-network.argv
--- libvirt-0.9.12.orig/tests/networkxml2argvdata/isolated-network.argv	2012-02-03 03:51:54.000000000 -0500
+++ libvirt-0.9.12/tests/networkxml2argvdata/isolated-network.argv	2012-05-16 10:53:34.754099221 -0400
@@ -1,4 +1,4 @@
-@DNSMASQ@ --strict-order --bind-interfaces --conf-file= \
+@DNSMASQ@ -u libvirt-dnsmasq --strict-order --bind-interfaces --conf-file= \
 --except-interface lo --dhcp-option=3 --no-resolv \
 --listen-address 192.168.152.1 \
 --dhcp-range 192.168.152.2,192.168.152.254 \
diff -Naurp libvirt-0.9.12.orig/tests/networkxml2argvdata/nat-network.argv libvirt-0.9.12/tests/networkxml2argvdata/nat-network.argv
--- libvirt-0.9.12.orig/tests/networkxml2argvdata/nat-network.argv	2012-02-03 03:51:54.000000000 -0500
+++ libvirt-0.9.12/tests/networkxml2argvdata/nat-network.argv	2012-05-16 10:53:34.758099229 -0400
@@ -1,4 +1,4 @@
-@DNSMASQ@ --strict-order --bind-interfaces --conf-file= \
+@DNSMASQ@ -u libvirt-dnsmasq --strict-order --bind-interfaces --conf-file= \
 --except-interface lo --listen-address 192.168.122.1 \
 --listen-address 192.168.123.1 --listen-address 2001:db8:ac10:fe01::1 \
 --listen-address 2001:db8:ac10:fd01::1 --listen-address 10.24.10.1 \
diff -Naurp libvirt-0.9.12.orig/tests/networkxml2argvdata/nat-network-dns-hosts.argv libvirt-0.9.12/tests/networkxml2argvdata/nat-network-dns-hosts.argv
--- libvirt-0.9.12.orig/tests/networkxml2argvdata/nat-network-dns-hosts.argv	2012-02-03 03:51:54.000000000 -0500
+++ libvirt-0.9.12/tests/networkxml2argvdata/nat-network-dns-hosts.argv	2012-05-16 10:54:55.898101514 -0400
@@ -1,3 +1,3 @@
-@DNSMASQ@ --strict-order --bind-interfaces --domain example.com \
+@DNSMASQ@ -u libvirt-dnsmasq --strict-order --bind-interfaces --domain example.com \
 --conf-file= --except-interface lo --listen-address 192.168.122.1 \
 --expand-hosts --addn-hosts=/var/lib/libvirt/dnsmasq/default.addnhosts\
diff -Naurp libvirt-0.9.12.orig/tests/networkxml2argvdata/nat-network-dns-srv-record.argv libvirt-0.9.12/tests/networkxml2argvdata/nat-network-dns-srv-record.argv
--- libvirt-0.9.12.orig/tests/networkxml2argvdata/nat-network-dns-srv-record.argv	2012-02-03 03:51:54.000000000 -0500
+++ libvirt-0.9.12/tests/networkxml2argvdata/nat-network-dns-srv-record.argv	2012-05-16 10:53:34.758099229 -0400
@@ -1,4 +1,4 @@
-@DNSMASQ@ \
+@DNSMASQ@ -u libvirt-dnsmasq \
 --strict-order \
 --bind-interfaces \
 --conf-file= \
diff -Naurp libvirt-0.9.12.orig/tests/networkxml2argvdata/nat-network-dns-srv-record-minimal.argv libvirt-0.9.12/tests/networkxml2argvdata/nat-network-dns-srv-record-minimal.argv
--- libvirt-0.9.12.orig/tests/networkxml2argvdata/nat-network-dns-srv-record-minimal.argv	2012-02-03 03:51:54.000000000 -0500
+++ libvirt-0.9.12/tests/networkxml2argvdata/nat-network-dns-srv-record-minimal.argv	2012-05-16 10:53:34.758099229 -0400
@@ -1,4 +1,4 @@
-@DNSMASQ@ \
+@DNSMASQ@ -u libvirt-dnsmasq \
 --strict-order \
 --bind-interfaces \
 --conf-file= \
diff -Naurp libvirt-0.9.12.orig/tests/networkxml2argvdata/nat-network-dns-txt-record.argv libvirt-0.9.12/tests/networkxml2argvdata/nat-network-dns-txt-record.argv
--- libvirt-0.9.12.orig/tests/networkxml2argvdata/nat-network-dns-txt-record.argv	2012-02-03 03:51:54.000000000 -0500
+++ libvirt-0.9.12/tests/networkxml2argvdata/nat-network-dns-txt-record.argv	2012-05-16 10:53:34.758099229 -0400
@@ -1,4 +1,4 @@
-@DNSMASQ@ --strict-order --bind-interfaces --conf-file= \
+@DNSMASQ@ -u libvirt-dnsmasq --strict-order --bind-interfaces --conf-file= \
 --except-interface lo --txt-record=example,example value \
 --listen-address 192.168.122.1 --listen-address 192.168.123.1 \
 --listen-address 2001:db8:ac10:fe01::1 \
diff -Naurp libvirt-0.9.12.orig/tests/networkxml2argvdata/netboot-network.argv libvirt-0.9.12/tests/networkxml2argvdata/netboot-network.argv
--- libvirt-0.9.12.orig/tests/networkxml2argvdata/netboot-network.argv	2012-02-03 03:51:54.000000000 -0500
+++ libvirt-0.9.12/tests/networkxml2argvdata/netboot-network.argv	2012-05-16 10:53:34.758099229 -0400
@@ -1,4 +1,4 @@
-@DNSMASQ@ --strict-order --bind-interfaces --domain example.com \
+@DNSMASQ@ -u libvirt-dnsmasq --strict-order --bind-interfaces --domain example.com \
 --conf-file= --except-interface lo --listen-address 192.168.122.1 \
 --dhcp-range 192.168.122.2,192.168.122.254 \
 --dhcp-leasefile=/var/lib/libvirt/dnsmasq/netboot.leases \
diff -Naurp libvirt-0.9.12.orig/tests/networkxml2argvdata/netboot-proxy-network.argv libvirt-0.9.12/tests/networkxml2argvdata/netboot-proxy-network.argv
--- libvirt-0.9.12.orig/tests/networkxml2argvdata/netboot-proxy-network.argv	2012-02-03 03:51:54.000000000 -0500
+++ libvirt-0.9.12/tests/networkxml2argvdata/netboot-proxy-network.argv	2012-05-16 10:53:34.758099229 -0400
@@ -1,4 +1,4 @@
-@DNSMASQ@ --strict-order --bind-interfaces --domain example.com \
+@DNSMASQ@ -u libvirt-dnsmasq --strict-order --bind-interfaces --domain example.com \
 --conf-file= --except-interface lo --listen-address 192.168.122.1 \
 --dhcp-range 192.168.122.2,192.168.122.254 \
 --dhcp-leasefile=/var/lib/libvirt/dnsmasq/netboot.leases \
diff -Naurp libvirt-0.9.12.orig/tests/networkxml2argvdata/routed-network.argv libvirt-0.9.12/tests/networkxml2argvdata/routed-network.argv
--- libvirt-0.9.12.orig/tests/networkxml2argvdata/routed-network.argv	2012-02-03 03:51:54.000000000 -0500
+++ libvirt-0.9.12/tests/networkxml2argvdata/routed-network.argv	2012-05-16 10:53:34.758099229 -0400
@@ -1,2 +1,2 @@
-@DNSMASQ@ --strict-order --bind-interfaces --conf-file= \
+@DNSMASQ@ -u libvirt-dnsmasq --strict-order --bind-interfaces --conf-file= \
 --except-interface lo --listen-address 192.168.122.1\
