freebsd-dev/etc/rc.d
Conrad Meyer 648176e095 bluetooth: Default to discoverable off
Try to not expose bluetooth devices to external devices unless the user
explicitly configures it, like any other radio/network device.  Bluetooth
has a long history of security problems and it is probably best to keep it
disabled if not needed.

Users who do use the bluetooth device should enable "discoverable" in
bluetooth.device.conf(5) after this change.

Keep in mind that bluetooth addresses can be discovered by passive
monitoring or whole address-space scans[0], so a safety conscious user
should also disable "connectable" in bluetooth.device.conf(5).

[0]: https://www.sans.edu/cyber-research/security-laboratory/article/bluetooth

Reviewed by:	emax, hselasky
Security:	maybe
Sponsored by:	Dell EMC Isilon
Differential Revision:	https://reviews.freebsd.org/D12831
2017-11-01 18:58:54 +00:00
..
abi Remove SVR4 (System V Release 4) binary compatibility support. 2017-02-28 05:14:42 +00:00
accounting - Don't log messages saying that accounting is being disabled and enabled 2012-05-02 14:25:39 +00:00
addswap - Add vnode-backed swap space specification support. This is enabled when 2013-06-27 18:28:45 +00:00
adjkerntz Get rid of the postrandom script. It was born in a time when the 2014-11-02 01:47:27 +00:00
amd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
apm - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
apmd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
archdep Small cleanup, add (spurious) quotation marks around the value 2009-05-30 21:51:38 +00:00
auditd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
auditdistd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
automount The "automount" rc script should depend on "automountd", not the other 2015-09-18 06:54:52 +00:00
automountd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
autounmountd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
bgfsck - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
blacklistd Add basic blacklist build support 2016-06-02 19:06:04 +00:00
bluetooth bluetooth: Default to discoverable off 2017-11-01 18:58:54 +00:00
bootparams - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
bridge - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
bsnmpd Allow rtadvd and bsnmpd to run in vnet jails 2017-07-03 20:36:58 +00:00
bthidd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ccd Fix typo (forgotten "=" after desc). 2016-04-24 12:07:44 +00:00
cleanvar - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
cleartmp - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
cron - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ctld - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
DAEMON
ddb - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
defaultroute Allow more services to run in vnet jails 2017-07-08 09:28:31 +00:00
devd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
devfs - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
dhclient Allow more services to run in vnet jails 2017-07-08 09:28:31 +00:00
dmesg - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
dumpon Add support for compressed kernel dumps. 2017-10-25 00:51:00 +00:00
FILESYSTEMS Make FILESYSTEMS, dumpon, and var not depend on zfs and zvol 2016-05-15 04:38:50 +00:00
fsck Refactor the root mount hold code and add the wait to etc/rc.d/fsck. 2016-05-10 08:44:44 +00:00
ftp-proxy - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ftpd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
gbde - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
geli - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
geli2 Fix duplicate "name" variable that sneaked in with the rc description commit. 2016-04-24 19:25:11 +00:00
gptboot Prepare for the removal of set_rcvar() by changing the rcvar= 2012-01-14 02:18:41 +00:00
growfs - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
gssd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
hastd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
hcsecd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
hostapd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
hostid - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
hostid_save Make hostid_save depend on hostid 2016-05-15 06:00:13 +00:00
hostname - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
inetd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
iovctl Use correct flag in iovctl_start(). 2015-06-27 18:01:50 +00:00
ip6addrctl Allow more services to run in vnet jails 2017-07-08 09:28:31 +00:00
ipfilter - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ipfs - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ipfw Add ipfw_status command to etc/rc.d/ipfw 2017-07-13 13:32:23 +00:00
ipfw_netflow ipfw_netflow: Add support for FIB 2017-07-18 14:02:02 +00:00
ipmon - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ipnat - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ipropd_master Restructure rc.d scripts for kerberos5 daemons: 2014-08-29 07:51:47 +00:00
ipropd_slave Fix a typo; master server for iprop service should be singular. 2014-09-16 05:45:38 +00:00
ipsec Allow ipsec to run in vnet jails 2017-07-05 20:00:58 +00:00
iscsictl - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
iscsid - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
jail Many shops still prefer rc.conf(5) based jail configuration(s). In-part 2016-10-12 20:50:17 +00:00
kadmind - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
kdc Make SERVERS REQUIRE clean when MK_KERBEROS==no 2016-04-30 09:50:08 +00:00
keyserv - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
kfd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
kld - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
kldxref - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
kpasswdd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ldconfig Add 32-bit caching to ldconfig script for powerpc64 2017-04-18 03:40:36 +00:00
local - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
local_unbound - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
localpkg - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
lockd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
LOGIN Unbreak rcorder when MK_UTX == no by moving utx from REQUIRE: in LOGIN to 2015-02-13 20:52:23 +00:00
lpd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
Makefile Unconditionally install rwhod support scripts. 2017-08-15 22:16:15 +00:00
mdconfig - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
mdconfig2 - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
mixer - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
motd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
mountcritlocal Refactor the root mount hold code and add the wait to etc/rc.d/fsck. 2016-05-10 08:44:44 +00:00
mountcritremote Fix circular dependency created after r287197 between ldconfig and mountcritremote 2016-05-30 19:59:51 +00:00
mountd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
mountlate - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
moused - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
msgs - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
natd Allow more services to run in vnet jails 2017-07-08 09:28:31 +00:00
netif Make netif REQUIRE hostid 2016-05-29 02:59:03 +00:00
netoptions - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
netwait - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
NETWORKING Fix broken dependency with routed when MK_ROUTED != no 2016-05-15 05:45:54 +00:00
newsyslog - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
nfscbd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
nfsclient - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
nfsd Modify /etc/rc.d/nfsd so it doesn't force a startup of nfsuserd for NFSv4. 2017-07-28 21:07:57 +00:00
nfsuserd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
nisdomain - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
nscd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
nsswitch - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ntpd Anticongestion refinements for ntpd rc script. This reverts r324681 2017-10-19 03:17:50 +00:00
ntpdate Follow r311103: add "pool" to the keywords that rc.d/ntpdate examines to 2017-01-11 00:14:47 +00:00
opensm Add svn:executable property 2011-04-25 05:57:01 +00:00
othermta Since r275359, there is no need to provide a bogus service name. 2015-10-26 15:16:27 +00:00
pf Allow more services to run in vnet jails 2017-07-08 09:28:31 +00:00
pflog Allow more services to run in vnet jails 2017-07-08 09:28:31 +00:00
pfsync Allow more services to run in vnet jails 2017-07-08 09:28:31 +00:00
power_profile - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
powerd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ppp - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
pppoed - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
pwcheck - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
quota - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
random Tighten /entropy permissions. 2017-05-27 06:24:06 +00:00
rarpd Allow more services to run in vnet jails 2017-07-08 09:28:31 +00:00
rctl - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
resolv - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
rfcomm_pppd_server - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
root - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
route6d Allow more services to run in vnet jails 2017-07-08 09:28:31 +00:00
routed Allow more services to run in vnet jails 2017-07-08 09:28:31 +00:00
routing Silence sysctl in startup scripts. 2017-05-03 08:10:03 +00:00
rpcbind - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
rtadvd Allow rtadvd and bsnmpd to run in vnet jails 2017-07-03 20:36:58 +00:00
rtsold Allow more services to run in vnet jails 2017-07-08 09:28:31 +00:00
rwho - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
savecore crashinfo: add "batch" mode and use it during boot 2017-06-01 21:23:04 +00:00
sdpd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
securelevel - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
sendmail Fix 'restart' action: rc.subr only expects to restart one service, not two. 2017-06-12 01:26:36 +00:00
serial
SERVERS Make SERVERS REQUIRE clean when MK_KERBEROS==no 2016-04-30 09:50:08 +00:00
sppp - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
sshd Disable DSA again. 2016-08-03 16:34:20 +00:00
statd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
static_arp Allow more services to run in vnet jails 2017-07-08 09:28:31 +00:00
static_ndp Allow more services to run in vnet jails 2017-07-08 09:28:31 +00:00
stf - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
swap - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
swaplate swapoff: Remove only late devices with -aL. 2016-10-21 21:55:50 +00:00
syscons Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
sysctl - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
syslogd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
timed - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
tmp - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ubthidhci Prepare for the removal of set_rcvar() by changing the rcvar= 2012-01-14 02:18:41 +00:00
ugidfw - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
utx - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
var Make FILESYSTEMS, dumpon, and var not depend on zfs and zvol 2016-05-15 04:38:50 +00:00
virecover - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
watchdogd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
wpa_supplicant - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ypbind - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ypldap Add rc.d script for ypldap(8). 2016-06-06 03:55:00 +00:00
yppasswdd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ypserv - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ypset - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
ypupdated Fix various issues with the NFS and RPC related scripts: 2012-02-14 10:51:24 +00:00
ypxfrd - Add descriptions to most of the rc scripts. Those are mostly taken from their 2016-04-23 16:10:54 +00:00
zfs rc.d/zfsbe: a new script designed for boot environment support 2016-10-13 06:19:54 +00:00
zfsbe rc.d/zfsbe: a new script designed for boot environment support 2016-10-13 06:19:54 +00:00
zfsd zfsd(8), the ZFS fault management daemon 2016-05-28 17:43:40 +00:00
zvol Make FILESYSTEMS, dumpon, and var not depend on zfs and zvol 2016-05-15 04:38:50 +00:00