-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2017-04-09 15:25, Joonas Lehtonen wrote: > Hi, > > if you setup MAC randomization via network manager in a debian 9 > template as described here: > https://www.qubes-os.org/doc/anonymizing-your-mac-address/ > you still leak your hostname. > > Once your MAC address is randomized you might also want to prevent the > disclosure of your netvm's hostname to the network, since "sys-net" > might be a unique hostname (that links all your random MAC addresses and > the fact that you likely use qubes). > > To prevent the hostname leak via DHCP option (12): > - start the debian 9 template > - open the file /etc/dhcpd/dhclient.conf > - in line number 15 you should see "send host-name = gethostname();" > - comment (add "#" at the beginning) or remove that line and store the file > - reboot your netvm > > I tested the change via inspecting dhcp requests and can confirm that > the hostname is no longer included in dhcp requests. >
Thanks. Added as a comment: https://github.com/QubesOS/qubes-issues/issues/938#issuecomment-292843628 - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJY6wEhAAoJENtN07w5UDAwdI8P/2+Rl5K73adR4MiQAACLDpZj jZl9YKskHKqBUMR+m0T2LkD2yw+cGpkOXiDjypTy2eYcsPqfbp0PZnggSK/9IpKM ZjIjOmoYkm6dfp81HJbz8pqmlf6v2fEZ8CaeHqV6kZnxzlq1aqwwVwtMfrRH2Lqm HMOA5Hlh+kCCysFC1DvoaJAOL+yv1HlC0lJsCtAVMw0pJadMxNXE8+JGywyeT1sY OJ+VqOcp9sCqVta/jeWbLx/WzIjqkkDPDtVhuC9KC5uu0pg8zv76ah+nBoSbO5dO Byvj91yMsCtaDFr684Yq8YlKJLFu2TSIBoUrh5/LHOPp1QYrpOTiSjSX1tTBAYd2 pk3Sid5XxoGabSPxMHT4VF0vCQktPp4WeXjy1oRAdTyZSjx8VF9oGrZQuFzP0Fey 2Zp4nYAKXjj5Ellf89ogxObiAqmZwyMCBerFfvSEnCrtWkxdMn+8s0b9pVf2ewNe mKKW5YxyDVCpSlSmiewkUzLtihOOC7rzOanTt72ZxEpF6uwEiT8vA6V6uuEJKQrv TkQaLaXB1UnSN7mxstRVu5gi53sX1n9znBbJLiQmNcRUv/+E63Uj1biP21caOqyZ zmiffOUSUc72dJvnNsCVz9sfygTHLUKVybn5QQ0oEl1Zt4yeeFY7Cq860uEqr5lQ a6JXYZkSDeL99PRgd61w =noLw -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3c49d353-59f2-7917-9f16-e69a262b21fc%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
