Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-05-03 15:54:51 -04:00
Code Issues Projects Releases Packages Wiki Activity

Merge remote-tracking branch 'raja/sysctl'

Browse source
This commit is contained in:
Patrick Schleizer 2024-07-17 08:02:45 -04:00
commit 070bb46a08
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
5 changed files with 57 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

8
usr/lib/NetworkManager/conf.d/80_ipv6-privacy.conf
View file

@ -1,2 +1,10 @@
## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions.
##
## https://datatracker.ietf.org/doc/html/rfc4941
## https://github.com/Kicksecure/security-misc/pull/145
## https://github.com/Kicksecure/security-misc/issues/184
##
## The use of IPv6 Privacy Extenstions is currently diasbled due to these breakages.
#[connection]
#ipv6.ip6-privacy=2

8
usr/lib/NetworkManager/conf.d/80_randomize-mac.conf
View file

@ -1,3 +1,11 @@
## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions.
##
## https://datatracker.ietf.org/doc/html/rfc4941
## https://github.com/Kicksecure/security-misc/pull/145
## https://github.com/Kicksecure/security-misc/issues/184
##
## The use of IPv6 Privacy Extenstions is currently diasbled due to these breakages.
#[device-mac-randomization]
#wifi.scan-rand-mac-address=yes

17
usr/lib/sysctl.d/990-security-misc.conf
View file

@ -337,3 +337,20 @@ net.ipv4.tcp_timestamps=0
##
#net.ipv4.conf.all.log_martians=1
#net.ipv4.conf.default.log_martians=1
## Enable IPv6 Privacy Extensions prefer temporary addresses over public addresses.
## The temporary/privacy address is used as the source of all outgoing traffic.
## Must be used in combination with /usr/lib/systemd/networkd.conf.d/80_ipv6-privacy-extensions.conf.
## Must be used in combination with /usr/lib/NetworkManager/conf.d/80_ipv6-privacy.conf.
## Should be used with MAC randomisation in /usr/lib/NetworkManager/conf.d/80_randomize-mac.conf.
##
## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions.
##
## https://datatracker.ietf.org/doc/html/rfc4941
## https://github.com/Kicksecure/security-misc/pull/145
## https://github.com/Kicksecure/security-misc/issues/184
##
## The use of IPv6 Privacy Extenstions is currently diasbled due to these breakages.
##
#net.ipv6.conf.all.use_tempaddr=2
#net.ipv6.conf.default.use_tempaddr=2

8
usr/lib/systemd/networkd.conf.d/80_ipv6-privacy-extensions.conf
View file

@ -1,2 +1,10 @@
## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions.
##
## https://datatracker.ietf.org/doc/html/rfc4941
## https://github.com/Kicksecure/security-misc/pull/145
## https://github.com/Kicksecure/security-misc/issues/184
##
## The use of IPv6 Privacy Extenstions is currently diasbled due to these breakages.
#[Network]
#IPv6PrivacyExtensions=kernel