GOOG-11-005200 - Google Android 11 must allow only the Administrator (EMM) to perform the following management function: enable/disable location services.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DoD information systems. An adversary could exploit vulnerabilities created by the weaker configuration to compromise DoD sensitive information.

SFR ID: FMT_MOF_EXT.1.2 #22

Solution

Configure the Google Android 11 device to enable/disable location services.

On the EMM console:
1. Open 'Set user restrictions on parent'.
2. Toggle 'Disallow config location' to On.
3. Toggle 'Disallow share location' to On.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_11_STIG.zip

Item Details

References: CAT|III, CCI|CCI-000366, CCI|CCI-000370, CCI|CCI-000381, Rule-ID|SV-228623r505868_rule, STIG-ID|GOOG-11-005200, Vuln-ID|V-228623

Plugin: MDM

Control ID: db04ed6224bf6f90457b55a443da5b78065448a7a1ef033990fee9c6922263da