CIS Benchmark: Bluetooth Sharing Disabled with Custom .plist File

clegger06
New Contributor III

JAMF Nation,

I am trying to configure a plist file to disable Bluetooth Sharing. It appears this could be done in com.apple.Bluetooth in the "By Host" folder of preferences in finder. (Users/$user/Library/Preferences/By Host)

I have come up with the following plist, when I push it via the JSS it is installed on the endpoint but the setting isn't enforced. Has anyone enforced this setting in this manner?

Additionally I am aware of the JAMF Github with the CIS benchmarks and @franton Github with the benchmarks as well. I would just like to enforce this via config profile if possible.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
        <key>PrefKeyServicesEnabled</key>
        <false/>
</dict>
</plist>
3 REPLIES 3

ericbenfer
Contributor II

Be sure to checkout CIS-for-macOS-Sierra-CP. This set of scripts includes config profiles (CP).
https://github.com/jamfprofessionalservices/CIS-for-macOS-Sierra-CP
Configuration profiles work for about 1/3rd of the CIS benchmarks.
As you noticed the byhost nature of Bluetooth sharing means it does not work as a config profile.

clegger06
New Contributor III

@ericbenfer ,

You have just taught me what I was wanting to learn. So Anything in "By Host" cannot be utilized via configuration profile? I assume because it requires the UUID which cannot be configured via Config Profile?

Thank you for the response.

franton
Valued Contributor III

@clegger06 actually ByHost prefs can be set by profile. You just ignore the UUID on the end of the name.

Whether the app you're trying to configure reads the settings properly is another matter.