Go to file
Marek Marczykowski-Górecki 8306013cbf
network: enable MAC randomization for wifi connections by default
We do have NetworkManager new enough to handle this feature already.
Enable both scan MAC address randomization, and also connection mac
address randomization. The later do in a "stable" way - preserving the
same MAC _for a connection_, until reboot. This is a safe tradeoff
between full random, which breaks some captive portals. The stable MAC
is generated separate for each connection, so it also prevents
correlation of the same machine between different networks.

Do not enable it for wired connections, as those are less often used at
random untrusted localizations, but also more often it's desired to
get the same IP address each time (having random MAC would make it much
harder).

QubesOS/qubes-issues#938
2021-03-27 18:10:05 +01:00
app-menu Fixed menu item name 2020-09-26 22:48:35 +00:00
applications-dropins Add /etc/qubes/applications override, use it for gnome-terminal 2020-01-27 14:05:55 +01:00
archlinux Install grub.qubes on Arch 2021-01-12 19:36:18 -05:00
autostart-dropins Start xfce4-notifyd when installed 2021-02-09 20:24:51 +01:00
boot grub: override GRUB_DEVICE with /dev/mapper/dmroot 2020-11-02 04:33:56 +01:00
ci travis: install also python xdg module 2020-01-28 04:22:12 +01:00
config-overrides Use 022 instead of 002 as sudo umask 2020-12-24 15:40:51 -05:00
debian network: enable MAC randomization for wifi connections by default 2021-03-27 18:10:05 +01:00
doc remove trailing whitespaces; remove dest_vm argument 2021-02-04 12:47:09 +01:00
filesystem Drop legacy xen entry in fstab 2020-07-26 14:30:33 +02:00
init Merge branch 'network-wait-fix' 2021-01-03 06:11:48 +01:00
misc Install 50-qubes-mem-hotplug.rules in /lib/udev instead of /etc/udev 2020-02-05 00:12:23 +00:00
network network: enable MAC randomization for wifi connections by default 2021-03-27 18:10:05 +01:00
package-managers Merge remote-tracking branch 'origin/pr/292' 2021-02-02 04:30:15 +01:00
passwordless-root sudo isn’t always built with SELinux support 2021-01-11 04:23:38 -05:00
patches.debian Split items in misc directory by topic 2020-02-04 23:59:09 +00:00
pkgs archlinux: created build scripts 2013-04-17 01:22:32 +02:00
qubes-rpc Fix typo in qvm_copy_nautilus.py 2021-03-14 15:14:37 +01:00
qubesagent Handle UnicodeError in firewall when resolving hostname 2021-01-02 15:29:58 -08:00
rpm_spec network: enable MAC randomization for wifi connections by default 2021-03-27 18:10:05 +01:00
test-packages tests: add run-tests script, plug it into travis 2017-05-20 13:20:08 +02:00
vm-init.d Move qubes-firewall from sbin to bin 2020-02-05 00:12:22 +00:00
vm-systemd Remove haveged service override 2021-02-10 22:31:10 +01:00
.coveragerc tests: add run-tests script, plug it into travis 2017-05-20 13:20:08 +02:00
.gitignore debian: add 'rpm' as dependency 2020-06-19 19:15:52 +02:00
.gitlab-ci.yml gitlab-ci: install test dependencies 2020-11-23 12:49:38 +01:00
.travis.yml travis: allow bullseye install to fail - no dnf/yum available 2020-09-16 15:40:51 +02:00
debian-quilt debian: fix shellcheck warnings in debian packaging 2017-09-30 05:05:33 +02:00
LICENSE Added LICENSE 2010-04-05 21:21:27 +02:00
Makefile network: enable MAC randomization for wifi connections by default 2021-03-27 18:10:05 +01:00
Makefile.builder Allow build for Focal 2020-10-10 04:18:19 +02:00
run-tests Load only test_* files when looking for tests (python) 2018-04-02 23:19:02 +02:00
series-debian-jessie-vm.conf Revert "Use sfdisk instead of parted to ..." on stretch and jessie 2019-02-24 05:15:04 +01:00
series-debian-stretch-vm.conf Revert "Use sfdisk instead of parted to ..." on stretch and jessie 2019-02-24 05:15:04 +01:00
series-debian-vm.conf Stop anacron from starting in Debian using existing constraint on cron 2017-02-05 23:36:27 +00:00
setup.py Install faster console scripts for Python code 2020-01-24 18:45:16 +01:00
version version 4.1.24 2021-02-13 14:53:18 +01:00