CIS Benchmark 2.4.7 Disable Bluetooth Sharing

Have you checked out Jamf Professional service's CIS Settings?

Allen

This one is trickier than your typical defaults write, since it's a user-level ByHost plist. Here's a quick and dirty script:

#!/bin/bash

hardwareUUID=$(system_profiler SPHardwareDataType | grep 'Hardware UUID:' | cut -d: -f2 | tr -d ' ')
user_homes=($(ls /Users))
for user_name in ${user_homes[@]}; do
        plist_file="/Users/$user_name/Library/Preferences/ByHost/com.apple.bluetooth.$hardwareUUID.plist"
        if [ -f "$plist_file" ]; then
            echo "Writing settings for $user_name.."
            defaults write "$plist_file" PrefKeyServicesEnabled -bool false
            chown $user_name $plist_file
        fi
done
killall blued

@golbiga Hmmm I have not seen that yet. I'll do some testing. I played around with it a bit and was having some issues re-mediating a few things. Unfortunately, bluetooth was one of the things I had trouble re-mediating. I'll keep testing though.

@bmodesitt hmm this seemed to work. I'll have to take a look at a few of these commands and your workflow. This is a good teachable moment seeing as I'm a beginner at scripting.