iwd/main.conf: enable ManagementFrameProtection by default

This commit is contained in:
Aminda Suomalainen 2024-07-23 09:01:32 +03:00
parent 4c9caf7235
commit 1fc8bcd7bc
Signed by: Mikaela
SSH Key Fingerprint: SHA256:CXLULpqNBdUKB6E6fLA1b/4SzG0HvKD19PbIePU175Q

View File

@ -11,8 +11,8 @@ Country=FI
# Legacy compatibility. Doesn't seem necessary on Lumina.
#use_default_interface=true
# build-in network configuration including DHCP client
# true if not using systemd-networkd!
# Build-in network configuration including DHCP client (and server when
# tethering), true if not using systemd-networkd!
#EnableNetworkConfiguration=false
# NOTE! Disable this in case of trouble connecting to network entirely, e.g.
@ -28,13 +28,19 @@ AddressRandomization=network
# Helsinki City WLAN (and variations) doesn't seem to like "full" (default)
AddressRandomizationRange=nic
# Always require management frame protection. May break things especially with
# legacy networks and hardware! Switch to 1 (default) for only when supported
# by both sides (downgrade attack possible?).
ManagementFrameProtection=2
[Network]
EnableIPv6=true
# My /etc/resolf.conf is generally ::1 127.0.0.1 127.0.0.53 and I am not
# entirely opposed to local servers. The two first are unbound, the third/this
# systemd-resolved
# systemd-resolved. NOTE! Must be used in conjunction with
# EnableNetworkConfiguration!
#NameResolvingService=systemd
NameResolvingService=none
#NameResolvingService=none
# Default 300, lower preferred by system. Useful when WiFi is known faster
# than ethernet like having 10 Mbps switch from time before the building had
# anything faster than DSL...