From c3b91d44d29b23384f59a0debad906f0de063a18 Mon Sep 17 00:00:00 2001
From: John Klug <john.klug@multitech.com>
Date: Wed, 21 May 2025 21:16:03 +0000
Subject: Remove the possibility of commissioning from Cellular for security
 purposes

---
 usr/libexec/commission/nfon.sh | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100755 usr/libexec/commission/nfon.sh

(limited to 'usr/libexec/commission/nfon.sh')

diff --git a/usr/libexec/commission/nfon.sh b/usr/libexec/commission/nfon.sh
new file mode 100755
index 0000000..92d3cb2
--- /dev/null
+++ b/usr/libexec/commission/nfon.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+nft add table inet filter
+nft add chain inet filter input { type filter hook input priority 0 \; }
+nft add rule inet filter input iifname "wwan0" drop
+echo 'Blocking wwan0 in commissioning mode'
+nft -a list table inet filter
-- 
cgit v1.2.3