STIGQter STIGQter: STIG Summary: Samsung Android (with Knox 2.x) STIG Version: 1 Release: 4 Benchmark Date: 22 Apr 2016: The Samsung Knox for Android platform must be configured to enforce an application installation policy through application whitelist specifying a set of allowed applications and versions.

DISA Rule

SV-70309r1_rule

Vulnerability Number

V-56055

Group Title

PP-MDF-001005

Rule Version

KNOX-35-009100

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the mobile device to use an application whitelist.

On the MDM Administration Console, configure the list of white-listed applications in the "Android Applications" rule and ensure only AO-approved applications are on the list.

(Note: This list can be empty if no applications have been approved.)
(Note: Refer to the Supplemental document for additional information.)

Check Contents

This validation procedure is performed on the MDM Administration Console.

Check whether the appropriate setting is configured on the MDM Administration Console:
1. Ask the MDM administrator to display the list of white-listed applications in the "Android Applications" rule.
2. Verify the list of white-listed applications has been approved by the Approving official (AO).
(Note: Refer to the Supplemental document for additional information.)
(Note: This list can be empty if no applications have been approved.)

If any of the applications on white-listed applications on the MDM Administration Console have not been approved by the AO, this is a finding.

Vulnerability Number

V-56055

Documentable

False

Rule Version

KNOX-35-009100

Severity Override Guidance

This validation procedure is performed on the MDM Administration Console.

Check whether the appropriate setting is configured on the MDM Administration Console:
1. Ask the MDM administrator to display the list of white-listed applications in the "Android Applications" rule.
2. Verify the list of white-listed applications has been approved by the Approving official (AO).
(Note: Refer to the Supplemental document for additional information.)
(Note: This list can be empty if no applications have been approved.)

If any of the applications on white-listed applications on the MDM Administration Console have not been approved by the AO, this is a finding.

Check Content Reference

M

Target Key

2699

Comments