In the light of Matthew Garrett (@mjg59): "Intel just disclosed a bunch of Linux Bluetooth vulnerabilities (https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00435.html), but: 1) Despite claiming the fixes are in 5.9, they aren't 2) Distributions weren't notified so didn't have backported patches ready to release" | nitter, it might be good to disable bluetooth if you’re not using it.
I disabled hardware.bluetooth.enable
in /etc/nixos/configuration.nix - which I think is sufficient, though I still see various bluetooth-related modules in lsmod
. Is there an easy way to avoid loading those (rather than just rmmod’ing by hand)?