From 07188c195835b385f5b67142ccdd5d54f46986eb Mon Sep 17 00:00:00 2001
From: Craig Jennings <c@cjennings.net>
Date: Sun, 18 Jan 2026 00:02:31 -0600
Subject: privacy(archsetup): add WiFi MAC address randomization

---
 archsetup | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

(limited to 'archsetup')

diff --git a/archsetup b/archsetup
index d713ce6..e3f8d2a 100755
--- a/archsetup
+++ b/archsetup
@@ -617,6 +617,20 @@ essential_services() {
     action="enabling NetworkManager" && display "task" "$action"
     systemctl enable NetworkManager.service >> "$logfile" 2>&1 || error "error" "$action" "$?"
 
+    action="configuring MAC address randomization" && display "task" "$action"
+    mkdir -p /etc/NetworkManager/conf.d
+    cat << 'EOF' > /etc/NetworkManager/conf.d/wifi-privacy.conf
+[device-mac-randomization]
+# Randomize MAC during WiFi scans
+wifi.scan-rand-mac-address=yes
+
+[connection-mac-randomization]
+# Random MAC for each WiFi connection (prevents tracking)
+wifi.cloned-mac-address=random
+# Stable MAC for ethernet (avoids issues with MAC-based DHCP reservations)
+ethernet.cloned-mac-address=stable
+EOF
+
     # Power
 
     display "subtitle" "Power"
-- 
cgit v1.2.3