Mikaela/shell-things
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git synced 2025-02-27 02:50:48 +01:00
Code Issues Projects Releases Wiki Activity

iwd/main.conf: enable ManagementFrameProtection by default

Browse Source
This commit is contained in:
Aminda Suomalainen 2024-07-23 09:01:32 +03:00
parent 4c9caf7235
commit 1fc8bcd7bc
Signed by: Mikaela
SSH Key Fingerprint: SHA256:CXLULpqNBdUKB6E6fLA1b/4SzG0HvKD19PbIePU175Q
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
etc/iwd/main.conf
View File

@ -11,8 +11,8 @@ Country=FI
# Legacy compatibility. Doesn't seem necessary on Lumina. # Legacy compatibility. Doesn't seem necessary on Lumina.
#use_default_interface=true #use_default_interface=true
# build-in network configuration including DHCP client # Build-in network configuration including DHCP client (and server when
# true if not using systemd-networkd! # tethering), true if not using systemd-networkd!
#EnableNetworkConfiguration=false #EnableNetworkConfiguration=false
# NOTE! Disable this in case of trouble connecting to network entirely, e.g. # NOTE! Disable this in case of trouble connecting to network entirely, e.g.
@ -28,13 +28,19 @@ AddressRandomization=network
# Helsinki City WLAN (and variations) doesn't seem to like "full" (default) # Helsinki City WLAN (and variations) doesn't seem to like "full" (default)
AddressRandomizationRange=nic AddressRandomizationRange=nic
# Always require management frame protection. May break things especially with
# legacy networks and hardware! Switch to 1 (default) for only when supported
# by both sides (downgrade attack possible?).
ManagementFrameProtection=2
[Network] [Network]
EnableIPv6=true EnableIPv6=true
# My /etc/resolf.conf is generally ::1 127.0.0.1 127.0.0.53 and I am not # My /etc/resolf.conf is generally ::1 127.0.0.1 127.0.0.53 and I am not
# entirely opposed to local servers. The two first are unbound, the third/this # entirely opposed to local servers. The two first are unbound, the third/this
# systemd-resolved # systemd-resolved. NOTE! Must be used in conjunction with
# EnableNetworkConfiguration!
#NameResolvingService=systemd #NameResolvingService=systemd
NameResolvingService=none #NameResolvingService=none
# Default 300, lower preferred by system. Useful when WiFi is known faster # Default 300, lower preferred by system. Useful when WiFi is known faster
# than ethernet like having 10 Mbps switch from time before the building had # than ethernet like having 10 Mbps switch from time before the building had
# anything faster than DSL... # anything faster than DSL...