[Moto G4 Play Questions & Answers] Urienn:
Hi, i cannot connect to public wifi with a

spoofed mac adress but it work good with the

permanent hardware mac adress ; and my laptop can

connect with a spoofed mac adress so the problem

come from my phone, a motorola moto g4 play.

I use ifconfig or macchanger

i find this kind of file on the phone, maybe

they have no importance :

/system/etc/firmware/wlan/prima/WCNSS_cfg.dat :

I can't read

/system/etc/firmware/wlan/prima/WCNSS_qcom_cfg.ini :

# This file allows user to override the factory

# defaults for the WLAN Driver
gEnableMacAddrSpoof=1

#Enable/Disable Link Layer Statistics Feature
gEnableLLStats=1

#Enable/Disable EXTScan Feature
gEnableEXTScan=1

gBtcFastWlanConnPref=0

gBtcEnableIndTimerVal=5

gEnableTDLSScan=1
gTDLSExternalControl=1
gEnableTDLSSupport=1
gEnableTDLSImplicitTrigger=1
gTDLSTxStatsPeriod=500
gTDLSTxPacketThreshold=10
gTDLSDiscoveryPeriod=20000
gTDLSMaxDiscoveryAttempt=5
gTDLSIdleTimeout=40000
gTDLSRssiHysteresis=100
gTDLSIdlePacketThreshold=5
gEnableTDLSScanCoexistence=1

#Splitscan related params
gPassiveMaxChannelTimeConc=110
gPassiveMinChannelTimeConc=60
gRestTimeConc=100
gActiveMinChannelTimeConc=20
gActiveMaxChannelTimeConc=27
gNumStaChanCombinedConc=1

# Enable IMPS or not
gEnableImps=1

# Enable/Disable Idle Scan

gEnableIdleScan=0

# Increase sleep duration (seconds) during IMPS
# 0 implies no periodic wake up from IMPS. Periodic wakeup is
# unnecessary if Idle Scan is disabled.
gImpsModSleepTime=0

# Diable administered P2P device
isP2pDeviceAddrAdministrated=0

# Enable BMPS or not
gEnableBmps=1

# Enable suspend or not

# 1: Enable standby, 2: Enable Deep sleep, 3: Enable Mcast/Bcast Filter

gEnableSuspend=3

# Phy Mode (auto, b, g, n, etc)
# Valid values are 0-9, with 0 = Auto, 4 = 11n, 9 = 11ac
gDot11Mode=0

# CSR Roaming Enable(1) Disable(0)

gRoamingTime=0

# Assigned MAC Addresses - This will be used until NV items are in place

# Each byte of MAC address is represented in Hex format as XX

Intf0MacAddress=000AF58989FF
Intf1MacAddress=000AF58989FE
Intf2MacAddress=000AF58989FD

Intf3MacAddress=000AF58989FC

# Set/Clear UAPSD mask

UapsdMask=0

# UAPSD service interval for VO,VI, BE, BK traffic
UapsdMask=0

InfraUapsdVoSrvIntv=20

InfraUapsdViSrvIntv=40

# Flag to allow STA send AddTspec even when ACM is Off
gAddTSWhenACMIsOff=1

# Make 1x1 the default antenna configuration

gNumRxAnt=1

# Beacon filtering frequency (unit in beacon intervals)

gNthBeaconFilter=50

# Enable WAPI or not

# WAPIIsEnabled=0

# Flags to filter Mcast abd Bcast RX packets.

# Value 0: No filtering, 1: Filter all Multicast.

# 2: Filter all Broadcast. 3: Filter all Mcast abd Bcast

McastBcastFilter=0

#Enable NDP offload
hostNSOffload=1

#Flag to enable HostARPOffload feature or not

hostArpOffload=1

#SoftAP Related Parameters

# AP MAc addr

gAPMacAddr=000AF589dcab

# 802.11n Protection flag

gEnableApProt=1

#Enable OBSS protection

gEnableApOBSSProt=1

#Enable/Disable UAPSD for SoftAP

gEnableApUapsd=1

# Fixed Rate

gFixedRate=0

# Maximum Tx power

# gTxPowerCap=30

# Fragmentation Threshold

# gFragmentationThreshold=2346

# RTS threshold

RTSThreshold=2347

# Intra-BSS forward

gDisableIntraBssFwd=0

# WMM Enable/Disable

WmmIsEnabled=0

# 802.11d support

g11dSupportEnabled=0

# CCX Support and fast transition
EseEnabled=0
FastTransitionEnabled=1
ImplicitQosIsEnabled=0
gNeighborScanTimerPeriod=200

# default value of this parameter is zero to enable dynamic threshold allocation
# to set static roming threshold uncomment below parameter and set vaule
#gNeighborLookupThreshold=78

gNeighborScanChannelMinTime=20
gNeighborScanChannelMaxTime=30

# Legacy (non-CCX, non-802.11r) Fast Roaming Support
# To enable, set FastRoamEnabled=1
# To disable, set FastRoamEnabled=0
FastRoamEnabled=1

#Check if the AP to which we are roaming is better than current AP in terms of RSSI.
#Checking is disabled if set to Zero.Otherwise it will use this value as to how better
#the RSSI of the new/roamable AP should be for roaming
RoamRssiDiff=5

# SAP Country code

# Default Country Code is 2 bytes, 3rd byte is optional indoor or out door.

# Example

# US Indoor, USI

# Korea Outdoor, KRO

# Japan without optional byte, JP

# France without optional byte, FR

#gAPCntryCode=USI

#Short Guard Interval Enable/disable

gShortGI20Mhz=1

gShortGI40Mhz=1

#Auto Shutdown Value in seconds. A value of 0 means Auto shutoff is disabled

gAPAutoShutOff=0

# SAP auto channel selection configuration

# 0 = disable auto channel selection

# 1 = enable auto channel selection, channel provided by supplicant will be ignored

gApAutoChannelSelection=0

# Listen Energy Detect Mode Configuration

# Valid values 0-128

# 128 means disable Energy Detect feature

# 0-9 are threshold code and 7 is recommended value from system if feature is to be enabled.

# 10-128 are reserved.

# The EDET threshold mapping is as follows in 3dB step:

# 0 = -60 dBm

# 1 = -63 dBm

# 2 = -66 dBm

# ...

# 7 = -81 dBm

# 8 = -84 dBm

# 9 = -87 dBm

# Note: Any of these settings are valid. Setting 0 would yield the highest power saving (in a noisy environment) at the cost of more range. The range impact is approximately #calculated as:

#

# Range Loss (dB) = EDET threshold level (dBm) + 97 dBm.

#

gEnablePhyAgcListenMode=128

#Preferred channel to start BT AMP AP mode (0 means, any channel)

BtAmpPreferredChannel=0

#Preferred band (both or 2.4 only or 5 only)

BandCapability=1

#Beacon Early Termination (1 = enable the BET feature, 0 = disable)

enableBeaconEarlyTermination=1

beaconEarlyTerminationWakeInterval=11

#Bluetooth Alternate Mac Phy (1 = enable the BT AMP feature, 0 = disable)

gEnableBtAmp=0

#SOFTAP Channel Range selection

gAPChannelSelectStartChannel=1

gAPChannelSelectEndChannel=11

#SOFTAP Channel Range selection Operating band

# 0:2.4GHZ 1: LOW-5GHZ 2:MID-5GHZ 3:HIGH-5GHZ 4: 4.9HZ BAND 5: 5GHZ BAND

gAPChannelSelectOperatingBand=0

#Channel Bonding
gChannelBondingMode5GHz=1

gEnableModulatedDTIM = 3
gMaxLIModulatedDTIM = 3
gEnableDatainactivity = 200

#Enable Keep alive with non-zero period value

gStaKeepAlivePeriod=30

#Say gGoKeepAlivePeriod(5 seconds) and gGoLinkMonitorPeriod(10 seconds).
#For every 10 seconds DUT sends Qos Null frame(i.e., Keep Alive frame if link is idle for last 10 seconds.)
#For both active and power save clients.

#Power save clients: DUT set TIM bit from 10th second onwards and till client honors TIM bit.
#If doesn't honor for 5 seconds then Driver remove client.

#Active clients: DUT send Qos Null frame for 10th seconds onwards if it is not success still DUT try on
#11th second if not tries on 12th and so on till 15th second. Hence before disconnection DUT will send 5 NULL frames.
#Hence in any case DUT will detect client got removed in (10+5) seconds. i.e., (gGoKeepAlivePeriod +gGoLinkMonitorPeriod)..

#gGoLinkMonitorPeriod/ gApLinkMonitorPeriod is period where link is idle and it is period
#where we send NULL frame.

#gApLinkMonitorPeriod = 10

#gGoLinkMonitorPeriod = 10

#gGoKeepAlivePeriod/gApKeepAlivePeriod is time to spend to check whether frame are succeed to send or not.
#Hence total effective detection time is gGoLinkMonitorPeriod+ gGoKeepAlivePeriod/gApLinkMonitorPeriod+ gApKeepAlivePeriod.
gGoKeepAlivePeriod = 10

gApKeepAlivePeriod = 60
#If set will start with active scan after driver load, otherwise will start with

#passive scan to find out the domain

#gEnableBypass11d=1

#If set to 0, will not scan DFS channels

gEnableDFSChnlScan=1

gEnableLogp=1

# Enable Automatic Tx Power control

gEnableAutomaticTxPowerControl=0

# 0 for OLPC 1 for CLPC and SCPC
gEnableCloseLoop=1

#Data Inactivity Timeout when in powersave (in ms)
gDataInactivityTimeout=110

gEnableLpwrImgTransition=1

#If set to 0, MCC is not allowed.
gEnableMCCMode=0

# Priority Setting:COUNTRY IOCTL > 11d > NV default
gCountryCodePriority=1

#Count of the Scan Result age.
gScanResultAgeCount=2

#Enable Scan Results Aging based on timer
#Timer value is in seconds
#If Set to 0 it will not enable the feature
gScanAgingTime=10

# Scan Timing Parameters
# gPassiveMaxChannelTime=110
# gPassiveMinChannelTime=60
# Enable Tx LDPC
#gTxLdpcEnable = 1 for HT mode, 2 for VHT mode,3 for both HT and VHT
gTxLdpcEnable=3
# gActiveMaxChannelTime=40
# gActiveMinChannelTime=20

# Valid values are 2048,4096,8192 and so on
# Please don't use values other than the ones mentioned above
gMaxMediumTime=4096

# 802.11K support
gRrmEnable=1
gRrmOperChanMax=8
gRrmNonOperChanMax=8
gRrmRandIntvl=100

#Scan offload
gEnableDirectedScanOffload=0

#FlexConnect Power Factor
#Default is set to 0 (disable)
gFlexConnectPowerFactor=0

#SAP/P2P-GO mode traffic monitor
gEnableTrafficMonitor=0
gTrafficIdleTimeout=3000

#gAdvertiseConcurrentOperation=0

gVhtChannelWidth=2

# VHT Tx/Rx MCS values
# Valid values are 0,1,2. If commented out, the default value is 0.
# 0=MCS0-7, 1=MCS0-8, 2=MCS0-9
gVhtRxMCS=2
gVhtTxMCS=2

# Enable Tx beamforming
gTxBFEnable=1

#Enable/Disable TDLS Feature
gEnableTDLSSupport=1

#Enable/Disable TDLS Implicit Trigger
gEnableTDLSImplicitTrigger=0

#Enable/Disable TDLS WMM Mode
gEnableTDLSWmmMode=1

#Enable/Disable TDLS Buffer Sta
gEnableTDLSBufferSta=1

#Enable mac spoofing for firmware scans only (disabled in host scans)
gEnableMacAddrSpoof=2

#Disable Fatal event
gEnableFatalEvent=0

#gEnableRtsCtsHtVht=1
gEnableDynamicRAstartRate=1

#Enable Toggle ARP BD Rates
gToggleArpBDRates=1

#Disable multicast host fw logs
gMulticastHostMsgs=0

# Configure 60ms for BT, 60ms for WLAN
# Default values are WLAN 30ms, BT 120ms
btcStaticLenLeWlan=60000
btcStaticLenLeBt=60000

gIgnorePeerErpInfo=0
SARPowerBackoff=0

END

# Note: Configuration parser would not read anything past the END marker

/system/etc/firmware/wlan/prima/WCNSS_qcom_wlan_nv.bin :

I can't read

/sys/devices/soc.0/a000000.qcom,wcnss-wlan/wcnss_mac_adrr :

00:00:00:00:00:00

/sys/fs/selinux/class/capability2/perms/mac_admin :

2

/sys/fs/selinux/class/capability2/perms/mac_override

1

I think i am not the only one who have this problem, Thank for all answer.