Detections
Analytics

GOOG-16-012500 - Google Android 16 must be configured to disable 'Private Space' use - Private Space use.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Private Space is an Android feature that provides a separate encrypted container on the mobile device. Apps in Private Space show up in a separate container in the launcher and are hidden from the 'Recents' view, notifications, settings, and other apps when the private space is locked. In addition, an MDM server allowlist or blocklist cannot control the installation of apps into Private Space. Malware and other unauthorized apps could be installed on a DOD mobile device, which could lead to the compromise of DOD sensitive information or to an attack on the DOD network.

SFR ID: FMT_MOF_EXT.1.2 #47

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure the Google Android 16 device to disable 'Private Space'.

On the EMM console:

COBO:

1. Open 'Set user restrictions'.
2. Toggle 'Disallow add private profile' to 'ON'.

COPE:

1. Open 'Set user restrictions'.
2. Toggle 'Disallow add private profile' to 'ON'.

Configuration API: DISALLOW_ADD_PRIVATE_PROFILE

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_16_Y26M04_STIG.zip

Item Details

References: CAT|I, CCI|CCI-000370, Rule-ID|SV-276888r1140456_rule, STIG-ID|GOOG-16-012500, Vuln-ID|V-276888

Plugin: MDM

Control ID: f4537ef582439f858117ca3b36918b72c122790cd1908092db74552b7934e5f6