freebsd-skq/etc/defaults
cem bdee39477d bluetooth: Default to discoverable off
Try to not expose bluetooth devices to external devices unless the user
explicitly configures it, like any other radio/network device.  Bluetooth
has a long history of security problems and it is probably best to keep it
disabled if not needed.

Users who do use the bluetooth device should enable "discoverable" in
bluetooth.device.conf(5) after this change.

Keep in mind that bluetooth addresses can be discovered by passive
monitoring or whole address-space scans[0], so a safety conscious user
should also disable "connectable" in bluetooth.device.conf(5).

[0]: https://www.sans.edu/cyber-research/security-laboratory/article/bluetooth

Reviewed by:	emax, hselasky
Security:	maybe
Sponsored by:	Dell EMC Isilon
Differential Revision:	https://reviews.freebsd.org/D12831
2017-11-01 18:58:54 +00:00
..
bluetooth.device.conf bluetooth: Default to discoverable off 2017-11-01 18:58:54 +00:00
devfs.rules Unhide /dev/zfs in devfsrules_jail. 2012-03-16 21:30:26 +00:00
Makefile DIRDEPS_BUILD: Fix staging of share/sendmail and share/examples. 2016-03-11 23:45:09 +00:00
Makefile.depend DIRDEPS_BUILD: Fix staging of share/sendmail and share/examples. 2016-03-11 23:45:09 +00:00
periodic.conf Anticongestion refinements for ntpd rc script. This reverts r324681 2017-10-19 03:17:50 +00:00
rc.conf Add support for compressed kernel dumps. 2017-10-25 00:51:00 +00:00