From 17a3a87f6e1b5a9e87bc3a7eeb5fb6a065dcbbde Mon Sep 17 00:00:00 2001 From: Gary Dotzler Date: Mon, 28 Sep 2026 16:46:14 +0000 Subject: [PATCH] procd: assign conventional /dev/net/tun permissions Set /dev/net/tun to mode 0666, matching the TUN/TAP permissions documented by docs.kernel.org[1] and the default udev policy used by other Linux systems[2]. This avoids forcing otherwise unprivileged processes to retain elevated privileges solely to open the device node. Interface creation and attachment remain subject to the kernel's usual capability and ownership checks. [1] https://docs.kernel.org/networking/tuntap.html#configuration [2] https://github.com/systemd/systemd/blob/be1e78ec49f8c84c634d9e58dae834b27ea28436/rules.d/50-udev-default.rules.in#L111 Signed-off-by: Gary Dotzler Link: https://github.com/openwrt/openwrt/pull/25464 Signed-off-by: Nick Hainke --- package/system/procd/Makefile | 2 +- package/system/procd/files/hotplug.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/system/procd/Makefile b/package/system/procd/Makefile index f3fd0a1ddc0..1ec7c9fd671 100644 --- a/package/system/procd/Makefile +++ b/package/system/procd/Makefile @@ -8,7 +8,7 @@ include $(TOPDIR)/rules.mk PKG_NAME:=procd -PKG_RELEASE:=1 +PKG_RELEASE:=2 PKG_SOURCE_PROTO:=git PKG_SOURCE_URL=$(PROJECT_GIT)/project/procd.git diff --git a/package/system/procd/files/hotplug.json b/package/system/procd/files/hotplug.json index e34e41f7a9d..f1b351cca45 100644 --- a/package/system/procd/files/hotplug.json +++ b/package/system/procd/files/hotplug.json @@ -20,7 +20,7 @@ ], [ "if", [ "eq", "DEVNAME", - [ "full", "ptmx", "zero", "tty", "net", "random", "urandom" ] + [ "full", "ptmx", "zero", "tty", "net", "net/tun", "random", "urandom" ] ], [ [ "makedev", "/dev/%DEVNAME%", "0666" ],