From 5c68b7ab2ade9b86589779ebfd95aca6bdd1e57a Mon Sep 17 00:00:00 2001
From: krecony <55319736+krecony@users.noreply.github.com>
Date: Sun, 27 Sep 2026 22:52:06 +0200
Subject: [PATCH 1/2] fix incorrect bluetooth configuration option

---
 .../30_security-misc.conf#security-misc-desktop        | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/etc/bluetooth/30_security-misc.conf#security-misc-desktop b/etc/bluetooth/30_security-misc.conf#security-misc-desktop
index 8de8384c..02b34ef2 100644
--- a/etc/bluetooth/30_security-misc.conf#security-misc-desktop
+++ b/etc/bluetooth/30_security-misc.conf#security-misc-desktop
@@ -16,13 +16,13 @@ DiscoverableTimeout = 30
 # Default=0 (unlimited)
 MaxControllers=1
 
+# network/on: A device will only accept advertising packets from peer
+# devices that contain private addresses. It may not be compatible with some
+# legacy devices since it requires the use of RPA(s) all the time.
+Privacy=network
+
 [Policy]
 # AutoEnable defines option to enable all controllers when they are found.
 # This includes adapters present on start as well as adapters that are plugged
 # in later on. Defaults to 'true'.
 AutoEnable=false
-
-# network/on: A device will only accept advertising packets from peer
-# devices that contain private addresses. It may not be compatible with some
-# legacy devices since it requires the use of RPA(s) all the time.
-Privacy=network/on

From 231a1791b116c95ca249a606edfa772941613d87 Mon Sep 17 00:00:00 2001
From: krecony <55319736+krecony@users.noreply.github.com>
Date: Sun, 27 Sep 2026 23:06:45 +0200
Subject: [PATCH 2/2] change README.md to match new value of the option

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index c92ada13..b7031f86 100644
--- a/README.md
+++ b/README.md
@@ -560,7 +560,7 @@ See:
 - Bluetooth controllers are not automatically enabled at boot (`AutoEnable=false`).
 - Pairable and discoverable modes time out after 30 seconds of inactivity.
 - Only one Bluetooth controller is exposed to the system (`MaxControllers=1`).
-- Resolvable Private Addresses (RPAs) are enforced (`Privacy=network/on`),
+- Resolvable Private Addresses (RPAs) are enforced (`Privacy=network`),
   preventing MAC-based tracking.
 
 See: