GOOG-10-002800 - Google Android 10 must be configured to disable developer modes.

Information

Developer modes expose features of the Google Android device that are not available during standard operation. An adversary may leverage a vulnerability inherent in a developer mode to compromise the confidentiality, integrity, and availability of DoD sensitive information. Disabling developer modes mitigates this risk.

SFR ID: FMT_SMF_EXT.1.1 #26

Solution

Configure the Google Android device to disable developer modes.

On the MDM Console:
1. Open restrictions section.
2. Open Restrictions section.
3. Toggle 'Disallow debugging Features' to on.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_10-x_V1R2_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-108047r1_rule, STIG-ID|GOOG-10-002800, Vuln-ID|V-98943

Plugin: MDM

Control ID: 3d288476e75ea4b48c683bff00e1da86565711b0dd7f52663f77b625b8415222