set ipv6.ip6-privacy=2

In order to avoid leaking the MAC in IPv6.
This commit is contained in:
3hhh 2022-05-20 18:14:30 +02:00
parent d6b80a7e00
commit eca37f941b
No known key found for this signature in database
GPG Key ID: EB03A691DB2F0833

View File

@ -51,6 +51,8 @@ wifi.scan-rand-mac-address=yes
wifi.cloned-mac-address=stable wifi.cloned-mac-address=stable
ethernet.cloned-mac-address=stable ethernet.cloned-mac-address=stable
connection.stable-id=${CONNECTION}/${BOOT} connection.stable-id=${CONNECTION}/${BOOT}
#use random IPv6 addresses per session / don't leak MAC via IPv6 (cf. RFC 4941):
ipv6.ip6-privacy=2
~~~ ~~~
* `stable` in combination with `${CONNECTION}/${BOOT}` generates a random address that persists until reboot. * `stable` in combination with `${CONNECTION}/${BOOT}` generates a random address that persists until reboot.