etc/firefox/policies/policies.json

@@ -671,7 +671,7 @@
 			},
 			"browser.display.use_document_fonts": {
 				"Comment": "Are webpages allowed to set their own fonts by default? 0 forbids them. See also browser.display.use_document_fonts.icon_font_allowlist for what webpages are allowed to set. If changing this, see also fingerprinting overrides",
-				"Status": "locked",
+				"Status": "user",
 				"Type": "number",
 				"Value": 0
 			},

etc/iwd/main.conf

@@ -14,7 +14,6 @@ use_default_interface=true
 
 # Build-in network configuration including DHCP client (and server when
 # tethering), true if not using systemd-networkd!
-#EnableNetworkConfiguration=true
 #EnableNetworkConfiguration=false
 
 # NOTE! Disable this in case of trouble connecting to network entirely!
@@ -23,17 +22,17 @@ use_default_interface=true
 
 # Generate a different spoofed MAC address for every SSID. Some networks
 # configured in /var/lib/iwd/ have a new MAC address for every connection.
-#AddressRandomization=network
+AddressRandomization=network
 # Randomize only 3 last octets of MAC. Reveals the manufacturer, but doesn't
 # set the locally administered bit. However the range is 00:00:01 to 00:00:FE
 # (254 possible addresses!)
 # Helsinki City WLAN (and variations) doesn't seem to like "full" (default)
-#AddressRandomizationRange=nic
+AddressRandomizationRange=nic
 
 # Always require management frame protection. May break things especially with
 # legacy networks and hardware! Switch to 1 (default) for only when supported
 # by both sides (downgrade attack possible?).
-#ManagementFrameProtection=2
+ManagementFrameProtection=2
 # It must be 1 for Lumina (ThinkPad T470) and MikroTik Chateau 5G to accept
 # each other, otherwise fallback to open guest network happens.
 #ManagementFrameProtection=1
@@ -47,7 +46,7 @@ EnableIPv6=true
 # systemd-resolved. NOTE! Must be used in conjunction with
 # EnableNetworkConfiguration!
 #NameResolvingService=systemd
-NameResolvingService=none
+#NameResolvingService=none
 # Default 300, lower preferred by system. Useful when WiFi is known faster
 # than ethernet like having 10 Mbps switch from time before the building had
 # anything faster than DSL...

rc/bashrc

@@ -659,7 +659,6 @@ alias nordvpn-off2=nordvpn-offf
 alias flatpak="LANG=C.UTF-8 flatpak"
 # Search without description
 alias flatpaks="LANG=C.UTF-8 flatpak search --columns=remote,version,application"
-alias flatpakl="LANG=C.UTF-8 flatpak list --columns=origin,version,application"
 
 if hash homebrew 2> /dev/null; then
 	alias brew=homebrew

rc/zshrc

@@ -647,7 +647,6 @@ alias nordvpn-off2=nordvpn-offf
 alias flatpak="LANG=C.UTF-8 flatpak"
 # Search without description
 alias flatpaks="LANG=C.UTF-8 flatpak search --columns=remote,version,application"
-alias flatpakl="LANG=C.UTF-8 flatpak list --columns=origin,version,application"
 
 if hash homebrew 2> /dev/null; then
 	alias brew=homebrew

var/lib/iwd/openwireless.org.open

@@ -1,9 +1,9 @@
-#[Settings]
+[Settings]
 #AlwaysRandomizeAddress=true
 # Disables connections without Management Frame Protection (and TKIP)
-#TransitionDisable=true
+TransitionDisable=true
 # Requires WiFi Enhanced Open (OWE)
-#DisabledTransitionModes=open
+DisabledTransitionModes=open
 
 [IPv4]
 DNS=127.0.0.1 127.0.0.53

var/lib/iwd/private-cafe-sample.psk

@@ -1,10 +1,10 @@
 # This SSID is "private-cafe-sample", it comes from the filename
-#[Settings]
+[Settings]
 #AlwaysRandomizeAddress=true
 # Disables TKIP and connections without Management Frame Protection
-#TransitionDisable=true
+TransitionDisable=true
 # Disables WPA2-{Personal,Enterprise} and requires WiFi Enhanced Open (OWE)
-#DisabledTransitionModes=personal,enterprise,open
+DisabledTransitionModes=personal,enterprise,open
 
 [Security]
 Passphrase=MySuperSecretPassphraseThatDoesNotReadHere

var/lib/iwd/private-home-sample.psk

@@ -4,9 +4,9 @@ AutoConnect=true
 # MAC address override. Takes priority over AlwaysRandomizeAddress
 #AddressOverride=
 # Disables TKIP and connections without Management Frame Protection
-#TransitionDisable=true
+TransitionDisable=true
 # Disables WPA2-{Personal,Enterprise} and requires WiFi Enhanced Open (OWE)
-#DisabledTransitionModes=personal,enterprise,open
+DisabledTransitionModes=personal,enterprise,open
 
 [Security]
 Passphrase=MySuperSecretPassphraseThatDoesNotReadHere
@@ -17,7 +17,6 @@ Passphrase=MySuperSecretPassphraseThatDoesNotReadHere
 #Address=192.168.1.2
 #Gateway=192.168.1.1
 DNS=127.0.0.1 127.0.0.53
-#Netmask=255.255.255.0
 #DomainName=.
 # In home network recognising the device may be a quality of life feature
 #SendHostname=true