Red Hat Bugzilla – Bug 196041
Permissions for /dev/net/tun are too restrictive.
Last modified: 2007-11-30 17:11:35 EST
There's no reason not to allow unprivileged users to open /dev/net/tun -- you
need CAP_NET_ADMIN to do anything interesting with it anyway, unless a
persistent device has been created and specifically given to the user in
question... in which case it's extremely _useful_ for them to be able to use it.
Please change the default mode to 0666.
Oops, I lie -- we do allow users to create new devices. I'll need to fix that in
the kernel first.
Fixed in kernel 2.6.17-1.2309_FC6
so, 0666 ??
Please. And for FC6 too.
fixed in udev-106-4.fc7 ... FC6 will follow