enable tun/tap
diff --git a/build_lxc.sh b/build_lxc.sh
index a052c0b..2ef5c08 100755
--- a/build_lxc.sh
+++ b/build_lxc.sh
@@ -35,6 +35,7 @@
 lxc.network.link = $BRIDGE
 lxc.network.flags = up
 lxc.network.ipv4 = $CONTAINER_CIDR
+lxc.cgroup.devices.allow = c 10:200 rwm
 EOF
 
 # Configure the network