STIGQter: STIG Summary: Samsung Android OS 8 with Knox 3.x COPE Use Case Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 25 Oct 2019: The Samsung Android 8 with Knox CONTAINER must be configured to: Disable Bixby Vision.

DISA Rule

SV-95003r1_rule

Vulnerability Number

V-80299

Group Title

PP-MDF-991000

Rule Version

KNOX-08-003600

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the Samsung Android 8 with Knox CONTAINER to disable Bixby Vision.

On the MDM CONTAINER console, add all packages associated with the Bixby Vision feature to the "Application disable list" setting in the "Android Applications" rule.

Note: Refer to the Supplemental document for additional information.

Check Contents

Review Samsung Android 8 with Knox configuration settings to determine if the mobile device CONTAINER is configured to disable Bixby Vision.

This validation procedure is performed on both the MDM Administration Console and the Samsung Android 8 with Knox device.

On the MDM CONTAINER console, do the following:
1. Ask the MDM Administrator to display the "Application disable list" setting in the "Android Application" rule.
2. Verify the list contains all Bixby Vision-related packages.

On the Samsung Android 8 with Knox device CONTAINER, do the following:
1. Open the Samsung Camera application.
2. Press the Bixby Vision "eye" icon.
3. Verify Bixby does not start.

If the Samsung Android 8 with Knox device starts Bixby Vision when pressing the Bixby Vision "eye" icon, this is a finding.

Vulnerability Number

V-80299

Documentable

False

Rule Version

KNOX-08-003600

Severity Override Guidance

Review Samsung Android 8 with Knox configuration settings to determine if the mobile device CONTAINER is configured to disable Bixby Vision.

This validation procedure is performed on both the MDM Administration Console and the Samsung Android 8 with Knox device.

On the MDM CONTAINER console, do the following:
1. Ask the MDM Administrator to display the "Application disable list" setting in the "Android Application" rule.
2. Verify the list contains all Bixby Vision-related packages.

On the Samsung Android 8 with Knox device CONTAINER, do the following:
1. Open the Samsung Camera application.
2. Press the Bixby Vision "eye" icon.
3. Verify Bixby does not start.

If the Samsung Android 8 with Knox device starts Bixby Vision when pressing the Bixby Vision "eye" icon, this is a finding.

Check Content Reference

M

Target Key

3367

Comments