search

Qubes-Community / Contents

Community documentation, code, links to third-party resources, ... See the issues and pull requests for pending content. Contributions are welcome !
259 stars 98 forks source link

anonymize MAC & hostname: some updates #227

Closed 3hhh closed 2 years ago

3hhh commented 2 years ago

See the commits for the details.

ghost commented 2 years ago

Hi ! I see there was a new post in #217 as well as in the forum after you made the PR - is it still actual ?

feffiboujike commented 2 years ago

The only thing that needs to change in this commit is the use ipv6.ip6-privacy. 3hhh and I are getting different results for the default value of ipv6.addr-gen-mode for WiFi connections but I think we will get the same value once 3hhh deletes the connection profile and then reconnects to the network.

If anyone else can confirm that debian-11 uses ipv6.addr-gen-mode = stable-privacy by default that would help. Just connect to network and run nmcli -f 'ipv6.addr-gen-mode' c show $WIFI_SSD in sys-net.

ghost commented 2 years ago

Thank you @feffiboujike and @3hhh

@3hhh : I just notice github complains about conflicts (there's some text in the current version that isn't in your change or vice-versa), maybe you've made your changes on an old version and/or forgot to commit some of your changes ? I'm not sure that you can see github's conflict notification (it doesn't show up when not logged in) - if not here are the issues:

- <<<<<<< master
The following example enables Wifi and Ethernet MAC address randomization while scanning (not connected), and uses a randomly generated but persistent MAC address for each individual Wifi and Ethernet connection profile.
It was inspired by the [official NetworkManager example](https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/main/examples/nm-conf.d/30-anon.conf).
=======
The following example enables Wi-Fi and Ethernet MAC address randomization while scanning (not connected), and uses a randomly generated but persistent MAC address for each individual Wi-Fi and Ethernet connection profile.
>>>>>>> master

and

<<<<<<< master
Unfortunately `NetworkManager` currently doesn't provide an option to disable that leak globally ([NetworkManager bug 584](https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/584)).
=======
Unfortunately `NetworkManager` currently doesn't provide an option to disable that leak globally ([Network Manager bug 584](https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/584)). However, the alternatives below exist.
>>>>>>> master

I could try to resolve them via github's interface but I don't know if the changes were made on purpose...

3hhh commented 2 years ago

No worries, after the discussion at https://forum.qubes-os.org/t/anonymizing-mac-address-documentation-clarification/14731/4 I'll have to redo it anyway.

3hhh commented 2 years ago

New PR: https://github.com/Qubes-Community/Contents/pull/228