diff options
| author | plunky <plunky@NetBSD.org> | 2007-04-21 06:15:22 +0000 |
|---|---|---|
| committer | plunky <plunky@NetBSD.org> | 2007-04-21 06:15:22 +0000 |
| commit | f5db72e7b75e66bff8fd02536e16c714f586d6a3 (patch) | |
| tree | da2c5f808b067b36ddaac23b9d44090f993f0673 /usr.sbin/btdevctl/btdevctl.8 | |
| parent | c4ec0fc4f86bef89641b9da211a0db43ed55abbf (diff) | |
Add 'service level' security for L2CAP and RFCOMM connections, following
the Linux (BlueZ) API.
- L2CAP or RFCOMM connections can require the baseband radio link
mode be any of:
authenticated (devices are paired)
encrypted (implies authentication)
secured (encryption, plus generate new link key)
- for sockets, the mode is set using setsockopt(2) and the socket
connection will be aborted if the mode change fails.
- mode settings will be applied during connection establishment, and
for safety, we enter a wait state and will only proceed when the mode
settings are successfuly set.
- It is possible to change the mode on already open connections, but
not possible to guarantee that data already queued (from either end)
will not be delivered. (this is a feature, not a bug)
- bthidev(4) and rfcomm_sppd(1) support "auth", "encrypt" and
"secure" options
- btdevctl(8) by default enables "auth" for HIDs, and "encrypt" for
keyboards (which are required to support it)
Diffstat (limited to 'usr.sbin/btdevctl/btdevctl.8')
| -rw-r--r-- | usr.sbin/btdevctl/btdevctl.8 | 31 |
1 files changed, 28 insertions, 3 deletions
diff --git a/usr.sbin/btdevctl/btdevctl.8 b/usr.sbin/btdevctl/btdevctl.8 index 2af72f769fd..d1dbd1797ae 100644 --- a/usr.sbin/btdevctl/btdevctl.8 +++ b/usr.sbin/btdevctl/btdevctl.8 @@ -1,4 +1,4 @@ -.\" $NetBSD: btdevctl.8,v 1.3 2006/09/10 15:45:56 plunky Exp $ +.\" $NetBSD: btdevctl.8,v 1.4 2007/04/21 06:15:24 plunky Exp $ .\" .\" Copyright (c) 2006 Itronix Inc. .\" All rights reserved. @@ -51,10 +51,10 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.\" $Id: btdevctl.8,v 1.3 2006/09/10 15:45:56 plunky Exp $ +.\" $Id: btdevctl.8,v 1.4 2007/04/21 06:15:24 plunky Exp $ .\" $FreeBSD: src/usr.sbin/bluetooth/bthidcontrol/bthidcontrol.8,v 1.3 2005/01/18 20:02:30 ru Exp $ .\" -.Dd September 9, 2006 +.Dd April 10, 2007 .Dt BTDEVCTL 8 .Os .Sh NAME @@ -64,6 +64,7 @@ .Nm .Op Fl A | Fl D .Op Fl qv +.Op Fl m Ar mode .Fl a Ar address .Fl d Ar device .Fl s Ar service @@ -99,6 +100,29 @@ Detach device .It Fl d Ar device Local device address. May be given as BDADDR or device name. +.It Fl m Ar mode +Connection link mode. +The following modes are supported: +.Pp +.Bl -tag -compact +.It none +clear previously set mode. +.It auth +require devices be paired, see +.Xr btpin 1 . +.It encrypt +auth, plus enable encryption. +.It secure +encryption, plus change of link key. +.El +.Pp +When configuring the HID service, +.Nm +will set +.Sq auth +by default, or +.Sq encrypt +for keyboard devices. .It Fl q Ignore any cached data and perform a SDP query for the given .Ar service . @@ -136,6 +160,7 @@ to YES. .It Pa /var/db/btdevctl.plist .El .Sh SEE ALSO +.Xr btpin 1 , .Xr bthidev 4 , .Xr bthub 4 , .Xr btsco 4 , |
