STIGQter STIGQter: STIG Summary: Google Android 10.x Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Jan 2020:

Google Android 10 devices must be configured to disable the use of third-party keyboards.

DISA Rule

SV-108087r1_rule

Vulnerability Number

V-98983

Group Title

PP-MDF-991000

Rule Version

GOOG-10-011000

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Configure Google Android 10 device to disallow the use of third-party keyboards.

On the MDM console, in the Android user restrictions section, select "Set input methods" and ensure no third-party keyboards are installed.

Check Contents

Review device configuration settings to confirm that no third-party keyboards are enabled.

This procedure is performed on both the MDM console and the Google Android 10 device.

In the MDM management console, review the user restrictions section.
Select "Set input methods" and insure no third-party keyboards are installed.

On the Google Android 10 device, to see if a third-party keyboard is enabled:
1. Open Settings>>System>>Languages & input.
2. Tap "Virtual keyboard".
3. Tap "Manage keyboard".
4. Ensure no third-party keyboards are listed, or if third-party keyboards are present they are "Disabled by admin".

If third-party keyboards are enabled, this is a finding.

Google's Android operating system patch website: https://source.android.com/security/bulletin/

Vulnerability Number

V-98983

Documentable

False

Rule Version

GOOG-10-011000

Severity Override Guidance

Review device configuration settings to confirm that no third-party keyboards are enabled.

This procedure is performed on both the MDM console and the Google Android 10 device.

In the MDM management console, review the user restrictions section.
Select "Set input methods" and insure no third-party keyboards are installed.

On the Google Android 10 device, to see if a third-party keyboard is enabled:
1. Open Settings>>System>>Languages & input.
2. Tap "Virtual keyboard".
3. Tap "Manage keyboard".
4. Ensure no third-party keyboards are listed, or if third-party keyboards are present they are "Disabled by admin".

If third-party keyboards are enabled, this is a finding.

Google's Android operating system patch website: https://source.android.com/security/bulletin/

Check Content Reference

M

Target Key

3581

Comments