STIGQter: STIG Summary: Google Android 10.x Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Jan 2020:

Google Android 10 must be configured to disable developer modes.

DISA Rule

SV-108047r1_rule

Vulnerability Number

V-98943

Group Title

PP-MDF-301170

Rule Version

GOOG-10-002800

Severity

CAT II

CCI(s)

• CCI-000381 - The organization configures the information system to provide only essential capabilities.

Weight

10

Fix Recommendation

Configure the Google Android device to disable developer modes.

On the MDM Console:
1. Open restrictions section.
2. Open Restrictions section.
3. Toggle "Disallow debugging Features" to on.

Check Contents

Review Google Android device configuration settings to determine whether a developer mode is enabled.

This validation procedure is performed on both the MDM Administration Console and the Android 10 device.

On the MDM console, do the following:

1. Open restrictions section.
2. Open Restrictions section.
3. Toggle "Disallow debugging Features" to on.

On the Android 10 device, do the following:

1. Go to Settings >> System.
2. Ensure Developer Options is not listed.

If the MDM console device policy is not set to disable developer mode or on the Android 10 device, the device policy is not set to disable developer mode, this is a finding.

Vulnerability Number

V-98943

Documentable

False

Rule Version

GOOG-10-002800

Severity Override Guidance

Review Google Android device configuration settings to determine whether a developer mode is enabled.

This validation procedure is performed on both the MDM Administration Console and the Android 10 device.

On the MDM console, do the following:

1. Open restrictions section.
2. Open Restrictions section.
3. Toggle "Disallow debugging Features" to on.

On the Android 10 device, do the following:

1. Go to Settings >> System.
2. Ensure Developer Options is not listed.

If the MDM console device policy is not set to disable developer mode or on the Android 10 device, the device policy is not set to disable developer mode, this is a finding.

Check Content Reference

M

Target Key

3581

Comments