Re: [Bluez-users] access restrictions after passing PIN

[Marcel Holtmann <marcel@holtmann.org>]

Hi Godfryd,

> > > I've got a question. Is there any restriction of accessing services
> > > after passing the pairing procedure? I think about situation when both
> > > devices are paired and I suppose that now there is no restriction of
> > > use of any services like serial port or any other. So is there a
> > > danger of overuse of these services (i.e. in mobile phones it is
> > > possible to manage them seemlessly through serial port from PC)?
> > 
> > this depends on if the device implements a policy manager or not. If it
> > uses a simple trust model based on the link key and the device address
> > then there are no other restrictions.
> 
> Is this "policy manager" specified somehow by Bluetooth SIG? Or is
> this just a good will of e.g. cell phone manufaturers? I could find
> anything but security modes (1,2,3) about access restrictions, but it
> isn't what I need.

read the Bluetooth security whitepaper.

Regards

Marcel




-------------------------------------------------------
SF.Net email is sponsored by: Tell us your software development plans!
Take this survey and enter to win a one-year sub to SourceForge.net
Plus IDC's 2005 look-ahead and a copy of this survey
Click here to start!  http://www.idcswdc.com/cgi-bin/survey?id=105hix
_______________________________________________
Bluez-users mailing list
Bluez-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-users