Hello,
I use an older Asus laptop to work on the go and sometimes I don’t have the option for WiFi so I would like to use my phone (Fairphone 6) to tether the internet access. I learned that RNDIS has been blacklisted by default due to security concerns. I haven’t looked into attack vectors or ways to exploit it, but my thought process is to allow a RNDIS connection when I want to use my phones internet, but to keep it disabled otherwise.
Is this a good way to deal with the issue that way? I assume that the RNDIS can be used to manipulate my system when the device is intentionally designed to exploit those flaws. So my assumption is that my device is more or less safe, but access of other devices not originating from me might cause trouble in that regard.
The system in general is “merely” handling private data, like job applications and in the future material from university.
Are my concerns overblown? How would I safely and easily manage access like that? I don’t mind running a script every time I want to use my phones internet if that means the system stays secure enough.
To “permanently” enable rndis_host please see how-to-load-rndis-host-module-on-usb-plug-in
For occasionally using it you may just issue (as superuser) modprobe rndis_hostand answer “n” when the system asks if you want to permanently un-blacklist it, so that the module will not be loaded on next reboot.
Re. how “safe” it is I think that just occasionally connecting to your phone from a laptop that is regularly backed up (or where there are no vital data) is reasonably safe, but I am no security expert so don’t take my word as a recommendation.
Sorry for the late reply. Yeah I’ve decided to keep it blacklisted and only temporarily un-blacklist it when I need to use it on the go. Thanks for the input, though!
edit: should I mark your reply as the solution? What is the etiquette here on the forums? My gut says yes, as it’s satisfying enough for me, but it might be not 100% what other people might be looking for.