Hauke Mehrtens ef393caee2 wifi-scripts: ucode: enable Beacon Protection by default with PMF ... The WPA3 and Wi-Fi Enhanced Open Deployment and Implementation Guide v1.1, Table 4 (Common security configuration) marks Beacon Protection as MAND for EHT-enabled APs and RECOM otherwise for all WPA3 and Wi-Fi Enhanced Open modes. The ucode path blindly passed beacon_prot through from UCI in iface setup, which ran before encryption and MFP had been configured, and left hostapd at its insecure default of 0 when the user did not explicitly opt in. Default beacon_prot to 1 in iface_mfp after MFP has been confirmed to be enabled, and emit it there instead of in iface_setup so the option is only written when PMF support is actually negotiated. Users can still disable it explicitly via UCI. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> Link: https://github.com/openwrt/openwrt/pull/23009 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>		2026-05-02 20:34:22 +02:00
..
bin	wifi-scripts: ucode: improve formatting of expected throughput	2025-12-15 12:39:14 +01:00
share	wifi-scripts: ucode: enable Beacon Protection by default with PMF	2026-05-02 20:34:22 +02:00