diff --git a/scripts/main.sh b/scripts/main.sh
index dd9e094..f5aed50 100755
--- a/scripts/main.sh
+++ b/scripts/main.sh
@@ -378,6 +378,10 @@ main_install_gentoo_in_chroot() {
 		enable_service systemd-resolved
 		echo -n "[Match]\nName=en*\n\n[Network]\nDHCP=yes" > /etc/systemd/network/20-wired-dhcp.network \
 			|| die "Could not write dhcp network config to '/etc/systemd/network/20-wired-dhcp.network'"
+		chown root:systemd-network /etc/systemd/network/20-wired-dhcp.network \
+			|| die "Could not change owner of '/etc/systemd/network/20-wired-dhcp.network'"
+		chmod 640 /etc/systemd/network/20-wired-dhcp.network \
+			|| die "Could not change owner of '/etc/systemd/network/20-wired-dhcp.network'"
 	fi
 
 	# Install ansible