<?xml version="1.0" encoding="UTF-8" ?>

<bugzilla version="5.2"
          urlbase="https://bugzilla.altlinux.org/"
          
          maintainer="jenya@basealt.ru"
>

    <bug>
          <bug_id>57069</bug_id>
          
          <creation_ts>2025-11-29 18:18:30 +0300</creation_ts>
          <short_desc>breaks /dev/net/tun permissions</short_desc>
          <delta_ts>2025-11-29 18:18:30 +0300</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>4</classification_id>
          <classification>Development</classification>
          <product>Sisyphus</product>
          <component>tunctl</component>
          <version>unstable</version>
          <rep_platform>all</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>NEW</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P5</priority>
          <bug_severity>blocker</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Sergey Vlasov">vsu</reporter>
          <assigned_to name="Nobody&apos;s working on this, feel free to take it">nobody</assigned_to>
          
          
          <qa_contact>qa-sisyphus</qa_contact>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>278173</commentid>
    <comment_count>0</comment_count>
    <who name="Sergey Vlasov">vsu</who>
    <bug_when>2025-11-29 18:18:30 +0300</bug_when>
    <thetext>При установленном пакете tunctl переопределяются права доступа к /dev/net/tun:

/lib/udev/rules.d/50-udev-default.rules:KERNEL==&quot;tun&quot;, MODE=&quot;0666&quot;, OPTIONS+=&quot;static_node=net/tun&quot;
/lib/udev/rules.d/90-tun.rules:KERNEL==&quot;tun&quot;, GROUP=&quot;tun&quot; MODE=&quot;0660&quot;

С такими настройками не работает, например, NetworkManager-openconnect:

NetworkManager[1265]: &lt;info&gt;  [1764420364.8055] manager: (vpn0): new Tun device (/org/freedesktop/NetworkManager/Devices/7)
NetworkManager[12688]: Connected to xxx.xxx.xxx.xxx:443
NetworkManager[12688]: SSL negotiation with SERVER.NAME
NetworkManager[12688]: Server certificate verify failed: signer not found
NetworkManager[12688]: Connected to HTTPS on SERVER.NAME with ciphersuite (TLS1.2)-(ECDHE-SECP256R1)-(RSA-SHA512)-(AES-256-GCM)
NetworkManager[12688]: Got CONNECT response: HTTP/1.1 200 OK
NetworkManager[12688]: CSTP connected. DPD 30, Keepalive 20
NetworkManager[12688]: Established DTLS connection (using GnuTLS). Ciphersuite (DTLS1.2)-(ECDHE-RSA)-(AES-256-GCM).
NetworkManager[12688]: Configured as yyy.yyy.yyy.yyy, with SSL connected and DTLS connected
NetworkManager[12688]: Session authentication will expire at Sat Dec 13 15:46:04 2025
openconnect[12688]: Failed to open tun device: Отказано в доступе
openconnect[12688]: Set up tun device failed
openconnect[12688]: Send BYE packet: Set up tun device failed
openconnect[12688]: Unrecoverable I/O error; exiting.

Сейчас пакет tunctl, похоже, никому не нужен, но может присутствовать в качестве окаменелости в давно установленных системах (зависимость на него присутствовала в etcnet &lt; 0.9.10-alt19).  Возможно, следует его закопать (всё, что может эта утилита, должен уметь ip tuntap) и занести в remove-obsoleted-packages.  Ну либо возрождать https://lists.altlinux.org/pipermail/devel/2007-March/135940.html для параноиков.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>