--- etc/mdev.conf
+++ etc/mdev.conf
@@ -123,6 +123,7 @@ usb[0-9]+	root:root 0660 */lib/mdev/usbd
 # 666 is fine: https://www.kernel.org/doc/Documentation/networking/tuntap.txt
 net/tun[0-9]*	root:netdev 0666
 net/tap[0-9]*	root:netdev 0666
+-SUBSYSTEM=net;DEVPATH=.*/net/.*;.*	root:root 600 @/usr/bin/net-predictable -main=2
 
 # zaptel devices
 zap(.*)		root:dialout 0660 =zap/%1