Detections
Analytics
GOOG-17-006400 - Google Android 17 must be configured to disable developer modes.
Information
Developer modes expose features of the mobile operating system that are not available during standard operation. An adversary may leverage a vulnerability inherent in a developer mode to compromise the confidentiality, integrity, and availability of DoW sensitive information. Disabling developer modes mitigates this risk.SFR ID: FMT_SMF_EXT.1.1 #26
Solution
Configure the Google Android 17 device to disable developer modes.On the EMM console:
COBO:
1. Open 'Set user restrictions'.
2. Toggle 'Disallow debugging features' to 'ON'.
COPE:
1. Open 'Set user restrictions'.
2. Toggle 'Disallow debugging features' to 'ON'.
3. Open 'Set user restrictions on parent'.
4. Toggle 'Disallow debugging features' to 'ON'.
Configuration API: DISALLOW_DEBUGGING_FEATURES
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_17_Y26M06_STIG.zip
Item Details
Audit Name: AirWatch - DISA Google Android 17 COPE STIG v1r1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-284808r1240666_rule, STIG-ID|GOOG-17-006400, Vuln-ID|V-284808
Plugin: MDM
Control ID: 9431276f8d70c697d62c1919bd34c521f35f09eeed21ca898195eaebc209538c