GOOG-12-010900 - Android 12 devices must be configured to disable the use of third-party keyboards.

Information

Many third-party keyboard applications are known to contain malware.

SFR ID: FMT_SMF_EXT.1.1 #47

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure the Google Android 12 device to disallow the use of third-party keyboards.

On the EMM console:

COBO and COPE:

1. Open 'Input methods'.
2. Tap 'Set input methods'.
3. Select only the approved keyboard.

Additionally, Admins can configure application allowlists for Google Play that does not have any third-party keyboards for user installation.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_12_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-250449r802697_rule, STIG-ID|GOOG-12-010900, Vuln-ID|V-250449

Plugin: MDM

Control ID: 98ddc6e80d7bf242e89fbf378839f9fadb847de621b32b5eca8725808b2cf7da