There's no reason not to allow unprivileged users to open /dev/net/tun -- you need CAP_NET_ADMIN to do anything interesting with it anyway, unless a persistent device has been created and specifically given to the user in question... in which case it's extremely _useful_ for them to be able to use it. Please change the default mode to 0666.
Oops, I lie -- we do allow users to create new devices. I'll need to fix that in the kernel first.
Fixed in kernel 2.6.17-1.2309_FC6
so, 0666 ??
Please. And for FC6 too.
Pretty please?
fixed in udev-106-4.fc7 ... FC6 will follow