diff --git a/udev/Makefile b/udev/Makefile
index 7bf6961..acd6991 100644
--- a/udev/Makefile
+++ b/udev/Makefile
@@ -26,3 +26,11 @@ install-legacy:
 
 # install-symlinks:
 # 	sudo cp $(PWD)/71-solokeys-symlinks.rules ${RULES_PATH}/71-solokeys-symlinks.rules
+
+# The ID_MM_DEVICE_IGNORE tag in our udev rules are ignored
+# if ModemManager is running with "strict" filter policy.
+# Debian Buster for instance does this.
+# One solution is to run ModemManager with "paranoid" filter policy.
+paranoid-modemmanager: dropin-paranoid-modemmanager activate
+dropin-paranoid-modemmanager:
+	test -f /usr/sbin/ModemManager && sudo cp ModemManager-override.conf /etc/systemd/system/ModemManager.service.d/override.conf
diff --git a/udev/ModemManager-override.conf b/udev/ModemManager-override.conf
new file mode 100644
index 0000000..7621100
--- /dev/null
+++ b/udev/ModemManager-override.conf
@@ -0,0 +1,3 @@
+[Service]
+ExecStart=
+ExecStart=/usr/sbin/ModemManager --filter-policy=paranoid