Received-SPF: pass (google.com: best guess record for domain of linux-bluetooth-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
MIME-Version: 1.0
References: <85C0B54E4752CA4F873E7C78CF0B26F5020662DB2C@LNDWSMBX02.ad.mpc.local>
In-Reply-To: <85C0B54E4752CA4F873E7C78CF0B26F5020662DB2C@LNDWSMBX02.ad.mpc.local>
From:   Luiz Augusto von Dentz <luiz.dentz@gmail.com>
Date:   Wed, 8 Jan 2020 10:42:57 -0800
Message-ID: <CABBYNZ++9739ptHJm+tiUUJANN_MfRpurvfdD=a4Qw3OHE-Epg@mail.gmail.com>
Subject: Re: Limiting what devices can pair over Bluetooth?
To:     James Pearson <james-p@moving-picture.com>
Cc:     "linux-bluetooth@vger.kernel.org" <linux-bluetooth@vger.kernel.org>
Content-Type: text/plain; charset="UTF-8"
Sender: linux-bluetooth-owner@vger.kernel.org
Precedence: bulk

Hi James,

On Wed, Jan 8, 2020 at 3:47 AM James Pearson <james-p@moving-picture.com> wrote:
>
> We don't normally enable Bluetooth on Linux (CentOS 7) installs for security reasons, but we have a case where we would like to use a Wacom tablet over Bluetooth
>
> I would like to be able to configure things so Bluetooth can _only_ be used to pair with Wacom tablets (or just HID devices?)
>
> As I never used Bluetooth in anger before, I'm struggling to find out where to start looking - does anyone know how to do this - or any pointers for where I should start looking?

Are you asking this from the system or user perspective, from the
system we don't have a configuration where you can restrict the types
of devices that the user can pair, on the other hand there is nothing
stopping the user interface (gnome, kde, etc) to implement such policy
on their bluetooth settings, though be aware targeting a subset of HID
devices may not be possible.

-- 
Luiz Augusto von Dentz