diff --git a/board/recalbox/fsoverlay/etc/udev/rules.d/10-hiddev-permissions.rules b/board/recalbox/fsoverlay/etc/udev/rules.d/10-hiddev-permissions.rules
new file mode 100644
index 00000000000..66f15573d6f
--- /dev/null
+++ b/board/recalbox/fsoverlay/etc/udev/rules.d/10-hiddev-permissions.rules
@@ -0,0 +1 @@
+KERNEL=="hiddev*",GROUP="input",MODE="0660"
diff --git a/board/recalbox/fsoverlay/etc/udev/rules.d/10-vchiq-permissions.rules b/board/recalbox/fsoverlay/etc/udev/rules.d/10-vchiq-permissions.rules
new file mode 100644
index 00000000000..bacea0e0665
--- /dev/null
+++ b/board/recalbox/fsoverlay/etc/udev/rules.d/10-vchiq-permissions.rules
@@ -0,0 +1 @@
+SUBSYSTEM=="vchiq",GROUP="video",MODE="0660"
diff --git a/board/recalbox/fsoverlay/recalbox/scripts/kodilauncher.sh b/board/recalbox/fsoverlay/recalbox/scripts/kodilauncher.sh
index 861fca04b3b..f1c6fda90f7 100755
--- a/board/recalbox/fsoverlay/recalbox/scripts/kodilauncher.sh
+++ b/board/recalbox/fsoverlay/recalbox/scripts/kodilauncher.sh
@@ -46,7 +46,7 @@ then
 fi
 
 (
-    LD_LIBRARY_PATH="/usr/lib/mysql" /usr/lib/kodi/kodi.bin --standalone -fs
+    su - kodi -c "LD_LIBRARY_PATH=/usr/lib/mysql usr/lib/kodi/kodi.bin --standalone -fs"
     echo "Kodi process ended." >&2
     echo "EXIT" >> /var/run/kodi.msg # in case of normal, but mainly anormal end of kodi, send a message to signal the end
 )&
diff --git a/board/recalbox/user-table.txt b/board/recalbox/user-table.txt
new file mode 100644
index 00000000000..29f9b614b8b
--- /dev/null
+++ b/board/recalbox/user-table.txt
@@ -0,0 +1 @@
+kodi 499 kodi 499 !=kodipassword /recalbox/share/system/ /bin/sh tty,video,audio,input Kodi user
diff --git a/configs/recalbox-rpi1_defconfig b/configs/recalbox-rpi1_defconfig
index 1f8dfa31fad..9d480e7e084 100644
--- a/configs/recalbox-rpi1_defconfig
+++ b/configs/recalbox-rpi1_defconfig
@@ -21,6 +21,7 @@ BR2_ENABLE_LOCALE_WHITELIST="C ar ca de el es eu_ES fr it ko nb_NO nl no pl pt s
 BR2_GENERATE_LOCALE="en_US.UTF-8 ar_YE.UTF-8 ca_ES.UTF-8 de_DE.UTF-8 el_GR.UTF-8 es_ES.UTF-8 eu_ES.UTF-8 fr_FR.UTF-8 it_IT.UTF-8 ko_KR.UTF-8 nb_NO.UTF-8 nn_NO.UTF-8 nl_NL.UTF-8 pl_PL.UTF-8 pt_BR.UTF-8 sv_SE.UTF-8 tr_TR.UTF-8 zh_CN.UTF-8 zh_TW.UTF-8"
 BR2_TARGET_TZ_INFO=y
 BR2_TARGET_LOCALTIME="Europe/Paris"
+BR2_ROOTFS_USERS_TABLES="board/recalbox/user-table.txt"
 BR2_ROOTFS_OVERLAY="board/recalbox/fsoverlay board/recalbox/rpi/fsoverlay"
 BR2_ROOTFS_POST_BUILD_SCRIPT="board/recalbox/recalbox-patch-target.sh"
 BR2_ROOTFS_POST_IMAGE_SCRIPT="board/recalbox/copy-recalbox-archives.sh"
diff --git a/configs/recalbox-rpi2_defconfig b/configs/recalbox-rpi2_defconfig
index ccd9db2caf3..87eff2a3121 100644
--- a/configs/recalbox-rpi2_defconfig
+++ b/configs/recalbox-rpi2_defconfig
@@ -22,6 +22,7 @@ BR2_ENABLE_LOCALE_WHITELIST="C ar ca de el es eu_ES fr it ko nb_NO nl no pl pt s
 BR2_GENERATE_LOCALE="en_US.UTF-8 ar_YE.UTF-8 ca_ES.UTF-8 de_DE.UTF-8 el_GR.UTF-8 es_ES.UTF-8 eu_ES.UTF-8 fr_FR.UTF-8 it_IT.UTF-8 ko_KR.UTF-8 nb_NO.UTF-8 nn_NO.UTF-8 nl_NL.UTF-8 pl_PL.UTF-8 pt_BR.UTF-8 sv_SE.UTF-8 tr_TR.UTF-8 zh_CN.UTF-8 zh_TW.UTF-8"
 BR2_TARGET_TZ_INFO=y
 BR2_TARGET_LOCALTIME="Europe/Paris"
+BR2_ROOTFS_USERS_TABLES="board/recalbox/user-table.txt"
 BR2_ROOTFS_OVERLAY="board/recalbox/fsoverlay board/recalbox/rpi/fsoverlay"
 BR2_ROOTFS_POST_BUILD_SCRIPT="board/recalbox/recalbox-patch-target.sh"
 BR2_ROOTFS_POST_IMAGE_SCRIPT="board/recalbox/copy-recalbox-archives.sh"
diff --git a/configs/recalbox-rpi3_defconfig b/configs/recalbox-rpi3_defconfig
index 01ed08eb6cd..5c54e3b9121 100644
--- a/configs/recalbox-rpi3_defconfig
+++ b/configs/recalbox-rpi3_defconfig
@@ -22,6 +22,7 @@ BR2_ENABLE_LOCALE_WHITELIST="C ar ca de el es eu_ES fr it ko nb_NO nl no pl pt s
 BR2_GENERATE_LOCALE="en_US.UTF-8 ar_YE.UTF-8 ca_ES.UTF-8 de_DE.UTF-8 el_GR.UTF-8 es_ES.UTF-8 eu_ES.UTF-8 fr_FR.UTF-8 it_IT.UTF-8 ko_KR.UTF-8 nb_NO.UTF-8 nn_NO.UTF-8 nl_NL.UTF-8 pl_PL.UTF-8 pt_BR.UTF-8 sv_SE.UTF-8 tr_TR.UTF-8 zh_CN.UTF-8 zh_TW.UTF-8"
 BR2_TARGET_TZ_INFO=y
 BR2_TARGET_LOCALTIME="Europe/Paris"
+BR2_ROOTFS_USERS_TABLES="board/recalbox/user-table.txt"
 BR2_ROOTFS_OVERLAY="board/recalbox/fsoverlay board/recalbox/rpi/fsoverlay"
 BR2_ROOTFS_POST_BUILD_SCRIPT="board/recalbox/recalbox-patch-target.sh"
 BR2_ROOTFS_POST_IMAGE_SCRIPT="board/recalbox/copy-recalbox-archives.sh"