They are created by write_net_rules in early boot and need to be copied
to the root file system once it has been remounted read/write.