The other thing that occurred to me is whether apparmor is interfering? The
`Operation not permitted' is suspicious of that.

There is a Debian wontfix bug relating to it: #947863.

Do you have apparmor enabled? If so does disabling it help?

Thanks

Mark