Need write permission to /dev/net/tun, not just read.