Comment 2 for bug 1675343

On face value this doesn't seem related to the use of script='' or not, it seems more like an ACL issue when accessing /dev/net/tun (it's not part of the cgroup_device_acl in Libvirt's qemu.conf on my Fedora machine, not sure how this works on Ubuntu). If I'm understanding correctly this is only hit now because you are introducing the use of tap devices here where they weren't used before which in turn is the reason it is trying to access /dev/net/tun?