add networkmanager-hardened-configs

2 files changed, 28 insertions, 0 deletions

diff --git a/nonprism/networkmanager-nonprism/30-nonprism.conf b/nonprism/networkmanager-nonprism/30-nonprism.conf
new file mode 100644
index 000000000..01b4883d5
--- /dev/null
+++ b/nonprism/networkmanager-nonprism/30-nonprism.conf
@@ -0,0 +1,12 @@
+# Non-Prism Hardened configuration file for NetworkManager
+# https://blogs.gnome.org/thaller/2016/08/26/mac-address-spoofing-in-networkmanager-1-4-0/
+# https://fedoraproject.org/wiki/Tools/NetworkManager/IPv6
+[device-mac-randomization]
+wifi.scan-rand-mac-address=yes
+
+[connection-mac-randomization]
+ethernet.cloned-mac-address=random
+wifi.cloned-mac-address=random
+
+[ipv6]
+ip6-privacy=2
\ No newline at end of file
diff --git a/nonprism/networkmanager-nonprism/PKGBUILD b/nonprism/networkmanager-nonprism/PKGBUILD
new file mode 100644
index 000000000..e9c427e0f
--- /dev/null
+++ b/nonprism/networkmanager-nonprism/PKGBUILD
@@ -0,0 +1,16 @@
+# Maintainer: Luke R. <g4jc@openmailbox.org> GPG: rsa4096/3EAE8697
+
+pkgname=networkmanager-hardened-configs
+pkgver=0.1
+pkgrel=1
+pkgdesc="Enables MAC protection on all interfaces."
+arch=(any)
+license=(GPL2)
+depends=('networkmanager')
+source=('30-nonprism.config')
+sha512sums=('70e9e4faa87cf258f5d47ce56a7b7d439e0dd9e59ab7d2be2790fcc55342c05a321e4d7e06b8a0ae30ed2575b2a62843d167e93aba9de5cbb9e2034bce0a71ed')
+whirlpoolsums=('753e1931978c3168acf93a92f9d1050dec4ba4fb9bf6dc76280c6a6bfeef8f09cc371501e7d34d83c013a800155466135cf24159b06258cde60ae7c871d0fb5e')
+
+package() {
+  install -Dm644 30-nonprism.conf "$pkgdir"/usr/lib/NetworkManager/conf.d/30-nonprism.conf
+}