Detections
Analytics

GOOG-17-009500 - Android 17 devices must be configured to disable the use of third-party keyboards.

Information

Many third-party keyboard applications are known to contain malware.

SFR ID: FMT_SMF.1.1 #47

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure the Google Android 17 device to disallow the use of third-party keyboards.

On the EMM console:

COBO and COPE:

1. Open 'Input methods'.
2. Tap 'Set input methods'.
3. Select only the approved keyboard.

Admins can also configure application allow lists for Google Play that do not have any third-party keyboards for user installation.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_17_Y26M06_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-284731r1240342_rule, STIG-ID|GOOG-17-009500, Vuln-ID|V-284731

Plugin: MDM

Control ID: a990881e4677049e633ff2b3d61887e6784b82011f9be538ddd784d83728d19f