From 13b4ddbb627d2279b41d1dcbe5c8ce1ac384b088 Mon Sep 17 00:00:00 2001 From: monsieuremre <130907164+monsieuremre@users.noreply.github.com> Date: Fri, 27 Oct 2023 14:34:21 +0000 Subject: [PATCH] 30_security-misc.conf --- etc/modprobe.d/30_security-misc.conf | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/etc/modprobe.d/30_security-misc.conf b/etc/modprobe.d/30_security-misc.conf index 128ab9c..a01ed81 100644 --- a/etc/modprobe.d/30_security-misc.conf +++ b/etc/modprobe.d/30_security-misc.conf @@ -11,8 +11,11 @@ options nf_conntrack nf_conntrack_helper=0 ## Disable bluetooth to reduce attack surface due to extended history of security vulnerabilities ## https://en.wikipedia.org/wiki/Bluetooth#History_of_security_concerns -install bluetooth /bin/disabled-bluetooth-by-security-misc -install btusb /bin/disabled-bluetooth-by-security-misc +# +## Now replaced by a privacy and security preserving default bluetooth configuration for better usability +# +# install bluetooth /bin/disabled-bluetooth-by-security-misc +# install btusb /bin/disabled-bluetooth-by-security-misc ## Disable thunderbolt and firewire modules to prevent some DMA attacks install thunderbolt /bin/disabled-thunderbolt-by-security-misc