/dev/net/tun permissions too restrictive
https://www.kernel.org/doc/Documentation/networking/tuntap.txt recommends 0666 as permissions for /dev/net/tun - you still need CAP_NET_ADMIN to do anything problematic, but this allows users to user created devices.
However in Alpine https://github.com/alpinelinux/aports/blob/master/main/busybox-initscripts/mdev.conf#L103 sets these to 0660 which means users cannot use created devices. Can we switch this to 0666?