From c96a33866db1e0623130887aa74f82a9edc4c7e0 Mon Sep 17 00:00:00 2001
From: Fabian Keil <fk@fabiankeil.de>
Date: Wed, 4 Mar 2015 14:22:43 +0100
Subject: [PATCH 110/325] Import rc.d/rether which randomizes MAC addresses

... provided ifconfig supports "either random".

Obtained from: ElectroBSD
---
 libexec/rc/rc.d/Makefile |  1 +
 libexec/rc/rc.d/rether   | 97 ++++++++++++++++++++++++++++++++++++++++
 2 files changed, 98 insertions(+)
 create mode 100755 libexec/rc/rc.d/rether

diff --git a/libexec/rc/rc.d/Makefile b/libexec/rc/rc.d/Makefile
index 6fc9ee63d8ad..1f0ffed41e14 100644
--- a/libexec/rc/rc.d/Makefile
+++ b/libexec/rc/rc.d/Makefile
@@ -88,6 +88,7 @@ CONFS=	DAEMON \
 	rarpd \
 	rctl \
 	resolv \
+	rether \
 	root \
 	route6d \
 	routing \
diff --git a/libexec/rc/rc.d/rether b/libexec/rc/rc.d/rether
new file mode 100755
index 000000000000..51e860353458
--- /dev/null
+++ b/libexec/rc/rc.d/rether
@@ -0,0 +1,97 @@
+#!/bin/sh
+#
+###########################################################################
+#
+# rether - Randomizes MAC addresses
+#
+# Add the following line to /etc/rc.conf to randomize the MAC
+# address for all recognized network interfaces that got one
+# at startup:
+#
+# rether_enable="YES"
+#
+# You can specify the interfaces manually like this:
+#
+# rether_interfaces="bge0 iwn0"
+#
+# By default rether runs before netif so cloned devices aren't
+# expected to exist yet. In case of wlan clones the MAC address
+# of the parent is inherited so as long as it's randomized the
+# clone should be fine too.
+#
+# Note that MAC address mismatches between clone and parent may
+# prevent the clone from working as expected. If you intend to
+# run this script after the system is up, you may want to
+# explicitly set rether_interfaces to skip clones.
+#
+# Rether requires an ifconfig version that understands "ether random".
+#
+###########################################################################
+#
+# Copyright (c) 2014 Fabian Keil <fk@fabiankeil.de>
+#
+# Permission to use, copy, modify, and distribute this software for any
+# purpose with or without fee is hereby granted, provided that the above
+# copyright notice and this permission notice appear in all copies.
+#
+# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. ALL YOUR
+# DATA IS BELONG TO THE SOFTWARE AND MAY BE EATEN BY IT. IF THAT IS NOT
+# ACCEPTABLE, YOU SHOULD PROBABLY MAKE BACKUPS BEFORE USING THE SOFTWARE.
+###########################################################################
+
+# PROVIDE: rether
+# REQUIRE: FILESYSTEMS
+# BEFORE: netif
+
+. /etc/rc.subr
+
+name="rether"
+rcvar="rether_enable"
+
+rether_enable="${rether_enable-NO}"
+
+start_cmd="rether_start"
+stop_cmd=":"
+
+# For the reason given above, it may make sense to skip cloned devices.
+get_ethernet_interfaces() {
+    ifconfig -l ether
+}
+
+get_ethernet_address() {
+    local interface="${1}"
+
+    ifconfig "${interface}" ether | awk '/ether/ {print $2}'
+}
+
+rether_start() {
+    local \
+        interface \
+        ethernet_address
+
+    if [ -z "${rether_interfaces}" ]; then
+        rether_interfaces="$(get_ethernet_interfaces)"
+    fi
+
+    echo "Randomizing MAC addresses for: ${rether_interfaces}"
+
+    for interface in $rether_interfaces;
+    do
+        ethernet_address="$(get_ethernet_address "${interface}")"
+
+        ifconfig "${interface}" ether random
+
+        if [ "${ethernet_address}" = "$(get_ethernet_address "${interface}")" ]; then
+            echo "Failed to randomize MAC address for ${interface}: ${ethernet_address}"
+        fi
+    done
+}
+
+load_rc_config "${name}"
+run_rc_command "${1}"
-- 
2.32.0