summarylogtreecommitdiffstats
path: root/50-networkmanager-defaults-privacy.conf
blob: 1da3f2a89805c9f39e67c928d6473fa52319b603 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
# Copyright Sebastian Wiesner <sebastian@swsnr.de>
#
# Permission to use, copy, modify, and/or distribute this software for any
# purpose with or without fee is hereby granted.
#
# THE SOFTWARE IS PROVIDED “AS IS” AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
# AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
# OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
# PERFORMANCE OF THIS SOFTWARE.

[connection]
# Randomize MAC address on each connection attempt.
#
# The default is 'preserve' which retains the hardware address and offers no
# privacy at all.
#
# Alternatively, use 'stable'/'stable-ssid' to generate a per connection profile
# or per SSID MAC address, which still allows one AP to track you, but makes
# tracking across APs more difficult.
wifi.cloned-mac-address=random
# Same for ethernet.
ethernet.cloned-mac-address=random

# Forcibly enable IPv6 RFC 4941 private addresses for auto-configuration.
# Typically, this would be enabled by setting net.ipv6.conf.all.use_tempaddr
# and net.ipv6.conf.default.use_tempaddr, but just in case let's set these
# explicitly for Network Manager connections.
ipv6.ip6-privacy=2