# devfs rule -s 300 add - < devfs_rules.raw
# devfs rule -s 300 show
# add to /etc/default/devfs.rules
[devfs_rules_tun_jail=300]
add include $devfsrules_jail
add path tun* unhide