Update networkmanager privacy configs

This commit is contained in:
Peter Vacho 2026-03-11 14:09:50 +01:00
parent 72541252ab
commit f854d71bfb
No known key found for this signature in database
GPG key ID: 00ACA0D6AF712EC9
6 changed files with 175 additions and 31 deletions

View file

@ -1,12 +1,21 @@
# Do not send the system hostname to DHCP servers.
#
# Normally NetworkManager includes the hostname in DHCP requests so the
# server can label leases or register dynamic DNS entries. Most networks
# do not rely on this, and disabling it slightly reduces information
# leaked about the device (especially when MAC randomization is used).
# By default NetworkManager includes the system hostname in DHCP
# requests so the DHCP server can label leases or register dynamic DNS
# records. Many networks do not use this information, and sending it
# unnecessarily exposes device identity.
#
# Disabling this slightly improves privacy when joining unknown
# networks, especially when MAC randomization is enabled.
#
# Individual connections can override this if needed:
# nmcli connection modify <connection> ipv4.dhcp-send-hostname yes ipv6.dhcp-send-hostname yes
[connection]
ipv4.dhcp-send-hostname=false
ipv6.dhcp-send-hostname=false
# nmcli connection modify <connection> ipv4.dhcp-send-hostname yes
# nmcli connection modify <connection> ipv6.dhcp-send-hostname yes
[ipv4]
dhcp-send-hostname=false
[ipv6]
# Only applies on networks using DHCPv6. Most IPv6 networks use SLAAC
# instead, in which case this setting has no effect.
dhcp-send-hostname=false