[Dev] Potential privacy violation in connman connection manager

nospam at curso.re nospam at curso.re
Wed Jun 14 22:00:38 GMT 2017


Hi all,

the connman[0] connection manager tries to detect whether an internet
connection is available by installing a temporary route to
ipv4.connman.net and ipv6.connman.net

This is documented in the README[1] and mentioned in the Arch wiki[2].

Although the official documentation claims that the remote servers do
not log any connection information, nothing grants that this may change
in the future.

It is possible, however, to disable the online checks with a
configuration setting in /etc/connman/main.conf as shown below.

$ cat /etc/connman/main.conf
[General]
EnableOnlineCheck=false

Should Paraboola ship a connman package with that setting since the
default is to enable online checks?

Best,

-- S.

[0] https://01.org/connman
[1] https://git.kernel.org/pub/scm/network/connman/connman.git/tree/README#n358
[2] https://wiki.archlinux.org/index.php/connman#Unknown_route_on_connection



More information about the Dev mailing list