Turn off Bluetooth
Bluetooth has a long history of security flaws. If you do not use it, keeping its code out of the kernel removes that exposure.
Why it matters
Bluetooth has a long record of vulnerabilities, some of which could be exploited by someone nearby without touching your computer. If you never use it, the radio and the kernel code that talks to it are risk with no benefit. Blocking the driver removes both.
How it works
Adds a modprobe configuration that blocks loading the modules in the bluetooth group, which are the core Bluetooth stack and the common USB adapter driver (btusb). Without them the adapter cannot start.
Who should use it
For desktops and servers that have no use for Bluetooth. Leave it off if you use wireless keyboards, mice, headphones, game controllers, or phone file transfer.
What you may notice
The Bluetooth switch disappears from the settings, and bluetoothctl reports no controller. Bluetooth keyboards, mice and headphones will not connect.
Check it on your computer
See whether the modules are loaded:
lsmod | grep -E '^(bluetooth|btusb) ' Apply it by hand
Tell the system not to load them, in a file you own:
sudo tee /etc/modprobe.d/90-modules-bluetooth.conf <<'EOF'
install bluetooth /bin/false
install btusb /bin/false
EOF Undo it
Remove the file. Modules already loaded stay until the next restart.
Related settings
Sources
- Linux Hardening Guide (madaidans)
- 2.5.2