Update networkmanager privacy configs

This commit is contained in:
Peter Vacho 2026-03-11 14:09:50 +01:00
parent 72541252ab
commit f854d71bfb
No known key found for this signature in database
GPG key ID: 00ACA0D6AF712EC9
6 changed files with 175 additions and 31 deletions

View file

@ -0,0 +1,27 @@
# Enable IPv6 temporary addresses (RFC 4941).
#
# On IPv6 networks using SLAAC (Stateless Address Autoconfiguration),
# hosts automatically generate their own addresses from the advertised
# network prefix. Normally this results in a single stable address that
# remains constant for the duration of the connection.
#
# Temporary addresses add additional short-lived IPv6 addresses that are
# periodically regenerated by the kernel. These addresses are preferred
# for outgoing connections (for example web browsing) so that remote
# services cannot reliably track a device by its stable IPv6 address.
#
# The stable address still exists and is used for:
# - inbound connections
# - local services
# - neighbor discovery
#
# Values:
# 0 = disable temporary addresses
# 1 = enable temporary addresses but prefer the stable address
# 2 = enable temporary addresses and prefer them for outbound traffic
#
# "default" applies to interfaces created after boot, while "all"
# applies the setting to existing interfaces as well.
net.ipv6.conf.default.use_tempaddr = 2
net.ipv6.conf.all.use_tempaddr = 2