]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
bluetooth: Default to discoverable off
authorConrad Meyer <cem@FreeBSD.org>
Wed, 1 Nov 2017 18:58:54 +0000 (18:58 +0000)
committerConrad Meyer <cem@FreeBSD.org>
Wed, 1 Nov 2017 18:58:54 +0000 (18:58 +0000)
commit648176e095097c5c2642a5627542423e277a5f8e
treee329d8894d1a6934f32eea28bd6a4ed9457c4c75
parent9c103b4675e715cf35dc8014888ad87f279d58e8
bluetooth: Default to discoverable off

Try to not expose bluetooth devices to external devices unless the user
explicitly configures it, like any other radio/network device.  Bluetooth
has a long history of security problems and it is probably best to keep it
disabled if not needed.

Users who do use the bluetooth device should enable "discoverable" in
bluetooth.device.conf(5) after this change.

Keep in mind that bluetooth addresses can be discovered by passive
monitoring or whole address-space scans[0], so a safety conscious user
should also disable "connectable" in bluetooth.device.conf(5).

[0]: https://www.sans.edu/cyber-research/security-laboratory/article/bluetooth

Reviewed by: emax, hselasky
Security: maybe
Sponsored by: Dell EMC Isilon
Differential Revision: https://reviews.freebsd.org/D12831
etc/defaults/bluetooth.device.conf
etc/rc.d/bluetooth