From 8ab0652af87a066963084e63a30659e0a772900b Mon Sep 17 00:00:00 2001 From: Mynacol Date: Mon, 13 Jun 2022 12:43:05 +0200 Subject: [PATCH] Generate and use temporary IPv6 addresses Temporary addresses are privacy-preserving for outgoing traffic, as they don't disclose the MAC address. See also https://blog.apnic.net/2022/06/10/iot-devices-endanger-ipv6-privacy/ The MAC-derived IPv6 stays, so clients (e.g. IP-based remotes) have a permanent IPv6 as before. Servers, including local ones, will see changing IPv6 addresses when contacted by LibreELEC. Users who don't like this may revert this setting. --- packages/linux/sysctl.d/network.conf | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/packages/linux/sysctl.d/network.conf b/packages/linux/sysctl.d/network.conf index 3518d6d962..0bee2b1773 100644 --- a/packages/linux/sysctl.d/network.conf +++ b/packages/linux/sysctl.d/network.conf @@ -1 +1,5 @@ net.ipv4.tcp_no_metrics_save=1 + +# generate/use temporary IPv6 addresses +net.ipv6.conf.all.use_tempaddr = 2 +net.ipv6.conf.default.use_tempaddr = 2