Detections
Analytics

GOOG-17-010700 - Google Android 17 must implement the management setting: Disable Camera.

Information

Authorizing official (AO) approval is required before the mobile device camera can be enabled for a specific user or group of users, based on a risk assessment of the operational environment. Camera use may lead to the exposure of sensitive DoW information in some operational environments.

SFR ID: FMT_MOF_EXT.1.2 #47

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

If the AO has not approved the use of the Google device camera, configure Android 17 to disable the device camera.

On the MDM console:

COBO and COPE:

1. Open Camera.
2. Select 'Disable camera'.

Configuration API: cameraDisabled

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_17_Y26M06_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-284850r1240704_rule, STIG-ID|GOOG-17-010700, Vuln-ID|V-284850

Plugin: MDM

Control ID: c413f2dc70520dc071621933184c64af96b7e0d6849c431f165369dd67c0b316