| Bug ID | 1159309 |
|---|---|
| Summary | /var/lib/dbus/machine-id and privacy |
| Classification | openSUSE |
| Product | openSUSE Distribution |
| Version | Leap 15.1 |
| Hardware | Other |
| OS | Other |
| Status | NEW |
| Severity | Normal |
| Priority | P5 - None |
| Component | Security |
| Assignee | security-team@suse.de |
| Reporter | suseino@riseup.net |
| QA Contact | qa-bugs@suse.de |
| Found By | --- |
| Blocker | --- |
The other day I saw an article [1] mentioning that Devuan has made so that a new /var/lib/dbus/machine-id is generated for each boot. This indeed seems like a good idea for improving privacy, considering that the file can be read by anyone and there is no restriction to that. Has openSUSE considered anything similar? [1] https://linux.slashdot.org/story/19/11/30/0538211/the-file-varlibdbusmachine-id-matters-for-your-privacy-and-devuan-fixed-it [2] https://devuan.org/os/debian-fork/ascii-point-release-announce-112119