What would the security implications be of enabling and using wifi and / or bluetooth before a user logs into the system in a Linux box?
Thanks for your help!
At a bare minimum, you expose the account the service runs as. If the service is subject to attack, then that becomes a vulnerability.
This is no different from exposing any other service, except that it is exposing a communications channel. The important question is, "what else on the box is using that communication channel?" You need to chase down the cascading services.