During the creation of tun and tap interfaces one can specify USER and GROUP for the device. For example:
# ip tuntap add mode tap dev tap0 # ip tuntap add mode tap dev tap1 user martin # ip tuntap add mode tap dev tap2 user root group root # ip tuntap show tap0: tap tap1: tap user 1000 tap2: tap user 0 group 0 #
Am I correct that USER and GROUP set the permission for reading and writing from/to tun or tap device? In other words for example if I create a tap device for user martin(
ip tuntap add mode tap dev tap1 user martin) and start an application using this tap1 device under user thomas, then application is not able to use the tap1 interface?