SSH added a new option (-w) to allow the creation of TUN/TAP tunnels. All available tutorials I've found so far http://ku1ik.com/2011/11/12/tunnel-vm-network-ssh.html requests allowing remote root login.
Is there a way to enable this type of tunneling without the need to allow remote root login ?