STIGQter: STIG Summary: Google Android 9.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 23 Aug 2019:

The Google Android Pie must be configured to disable developer modes.

DISA Rule

SV-106431r1_rule

Vulnerability Number

V-97327

Group Title

PP-MDF-301170

Rule Version

GOOG-09-002800

Severity

CAT II

CCI(s)

• CCI-000381 - The organization configures the information system to provide only essential capabilities.

Weight

10

Fix Recommendation

Configure the Google Android device to disable developer modes.

On the MDM Console:
1. Open restrictions section.
2. Open Restrictions section.
3. Set "Debugging Features" to Disallow.

Check Contents

Review Google Android device configuration settings to determine whether a developer mode is enabled.

This validation procedure is performed on both the MDM Administration Console and the Android Pie device.

On the MDM console, do the following:

1. Open restrictions section.
2. Open Restrictions section.
3. Confirm that "Debugging Features" is set to Disallow.

On the Android Pie device, do the following:

1. Go to Settings >> System
2. Ensure Developer Options is not listed.

If the MDM console device policy is not set to disable developer mode or on the Android Pie device, the device policy is not set to disable developer mode, this is a finding.

Vulnerability Number

V-97327

Documentable

False

Rule Version

GOOG-09-002800

Severity Override Guidance

Review Google Android device configuration settings to determine whether a developer mode is enabled.

This validation procedure is performed on both the MDM Administration Console and the Android Pie device.

On the MDM console, do the following:

1. Open restrictions section.
2. Open Restrictions section.
3. Confirm that "Debugging Features" is set to Disallow.

On the Android Pie device, do the following:

1. Go to Settings >> System
2. Ensure Developer Options is not listed.

If the MDM console device policy is not set to disable developer mode or on the Android Pie device, the device policy is not set to disable developer mode, this is a finding.

Check Content Reference

M

Target Key

3499

Comments