Hello, I think that it is the expected behavior, the session sshd process is run as normal user and does not inherit the capabilities of the sshd daemon.
Here is the documentation of PermitTunnel of sshd_config: Specifies whether tun(4) device forwarding is allowed. The argument must be yes, point-to-point (layer 3), ethernet (layer 2), or no. Specifying yes permits both point-to-point and ethernet. The default is no. Independent of this setting, the permissions of the selected tun(4) device must allow access to the user. You mentioned that it appears to be a regression, do you have a different behavior on older Ubuntu releases ? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2160695 Title: OpenSSH PermitTunnel regression: ssh -w fails with EPERM on TUNSETIFF To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2160695/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
