STIGQter STIGQter: STIG Summary: Samsung Android OS 7 with Knox 2.x Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 25 Oct 2019: The Samsung Android 7 with Knox must be configured to disable developer modes.

DISA Rule

SV-91245r1_rule

Vulnerability Number

V-76549

Group Title

PP-MDF-301170

Rule Version

KNOX-07-003700

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the Samsung Android 7 with Knox to disable developer modes.

On the MDM console, deselect the "Allow Developer Mode" checkbox in the "Android Restrictions" rule.

Check Contents

Review Samsung Android 7 with Knox configuration settings to determine whether a developer mode is enabled.

This validation procedure is performed on both the MDM Administration Console and the Samsung Android 7 with Knox device.

On the MDM console, do the following:
1. Ask the MDM administrator to display the "Allow Developer Mode" checkbox in the "Android Restrictions" rule.
2. Verify that the checkbox is not selected.

On the Samsung Android 7 with Knox device, do the following:
1. Open the device settings.
2. Select "Developer options". (**)
3. Attempt to enable "Developer options".

If the MDM console "Allow Developer Mode" checkbox is selected or on the Samsung Android 7 with Knox device, "Developer options" can be enabled by the user, this is a finding.

Note: The "Developer Modes" configuration setting may not be available in older MDM consoles. Disabling USB Debugging and Mock Locations also disables Developer modes on the mobile device.

(**) "Developer options" is initially hidden to users. To unhide this menu item:
1. Open the device settings.
2. Select "About device".
3. Select "Software info". (Note: On some devices, this step is not needed.)
4. Rapidly tap on "Build number" multiple times until the device displays the Developer Options menu item.

Vulnerability Number

V-76549

Documentable

False

Rule Version

KNOX-07-003700

Severity Override Guidance

Review Samsung Android 7 with Knox configuration settings to determine whether a developer mode is enabled.

This validation procedure is performed on both the MDM Administration Console and the Samsung Android 7 with Knox device.

On the MDM console, do the following:
1. Ask the MDM administrator to display the "Allow Developer Mode" checkbox in the "Android Restrictions" rule.
2. Verify that the checkbox is not selected.

On the Samsung Android 7 with Knox device, do the following:
1. Open the device settings.
2. Select "Developer options". (**)
3. Attempt to enable "Developer options".

If the MDM console "Allow Developer Mode" checkbox is selected or on the Samsung Android 7 with Knox device, "Developer options" can be enabled by the user, this is a finding.

Note: The "Developer Modes" configuration setting may not be available in older MDM consoles. Disabling USB Debugging and Mock Locations also disables Developer modes on the mobile device.

(**) "Developer options" is initially hidden to users. To unhide this menu item:
1. Open the device settings.
2. Select "About device".
3. Select "Software info". (Note: On some devices, this step is not needed.)
4. Rapidly tap on "Build number" multiple times until the device displays the Developer Options menu item.

Check Content Reference

M

Target Key

3253

Comments