GOOG-11-005200 - Google Android 11 must allow only the Administrator (EMM) to perform the following management function: enable/disable location services.

Information

If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DoD information systems. An adversary could exploit vulnerabilities created by the weaker configuration to compromise DoD sensitive information.

SFR ID: FMT_MOF_EXT.1.2 #22

Solution

Configure the Google Android 11 device to enable/disable location services.

On the EMM console:
1. Open 'Set user restrictions on parent'.
2. Toggle 'Disallow config location' to On.
3. Toggle 'Disallow share location' to On.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_11_Y23M01_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6(1), 800-53|CM-6b., 800-53|CM-7a., CAT|III, CCI|CCI-000366, CCI|CCI-000370, CCI|CCI-000381, Rule-ID|SV-228591r619923_rule, STIG-ID|GOOG-11-005200, Vuln-ID|V-228591

Plugin: MDM

Control ID: 9cc1ee765e0349443ea897b65fa8d5d72b3bada414edcc7678d1a6ca30428322