mask non-vendor part of mac adresses in LIPNSA

preseed/lipnsa.hook.sh

@@ -153,7 +153,10 @@ else
 	log_success_msg "> saved architecture"
 fi
 
-ip link > "${DIR}/ip-link" 2>&1
+# regexp replaces the last half of MAC adresses with :xx:xx:xx
+#   -> we still get the OUI and should be able to infer vendor stats, without saving
+#      the NIC specific part (that could be misused for identification/spoofing)
+ip link | sed 's/^\( *link\/[^ ]* \)\([0-9a-fA-F:]*\)\(:[0-9a-fA-F:]\{8\}\)\( .*\)/\1\2:xx:xx:xx\4/' > "${DIR}/ip-link" 2>&1
 if [ $? != 0 ]; then
 	log_failure_msg "> could not save ip devices"
 else