Bug 196041

Summary:	Permissions for /dev/net/tun are too restrictive.
Product:	[Fedora] Fedora	Reporter:	David Woodhouse <dwmw2>
Component:	udev	Assignee:	Harald Hoyer <harald>
Status:	CLOSED RAWHIDE	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	rawhide
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-06-26 12:54:31 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	150225

Description David Woodhouse 2006-06-20 15:58:13 UTC

There's no reason not to allow unprivileged users to open /dev/net/tun -- you
need CAP_NET_ADMIN to do anything interesting with it anyway, unless a
persistent device has been created and specifically given to the user in
question... in which case it's extremely _useful_ for them to be able to use it.

Please change the default mode to 0666.

Comment 1 David Woodhouse 2006-06-20 16:03:08 UTC

Oops, I lie -- we do allow users to create new devices. I'll need to fix that in
the kernel first.

Comment 2 David Woodhouse 2006-06-29 07:59:28 UTC

Fixed in kernel 2.6.17-1.2309_FC6

Comment 3 Harald Hoyer 2006-09-29 14:16:32 UTC

so, 0666 ??

Comment 4 David Woodhouse 2006-09-29 14:42:34 UTC

Please. And for FC6 too.

Comment 5 David Woodhouse 2007-05-02 07:25:41 UTC

Pretty please?

Comment 6 Harald Hoyer 2007-05-02 11:41:38 UTC

fixed in udev-106-4.fc7 ... FC6 will follow