GOOG-13-710900 - Android 13 devices must be configured to disable the use of third-party keyboards (work profile only).

Information

Many third-party keyboard applications are known to contain malware.

SFR ID: FMT_SMF_EXT.1.1 #47

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure the Google Android 13 device to disallow the use of third-party keyboards (work profile only).

On the EMM console:

1. Open 'Input methods'.
2. Tap 'Set input methods'.
3. Select only the approved keyboards.

Additionally, admins can configure application allowlists for Google Play so no third-party keyboards are available for user installation.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_13_BYOAD_Y24M04_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-258496r929526_rule, STIG-ID|GOOG-13-710900, Vuln-ID|V-258496

Plugin: MDM

Control ID: b723c7325311e5d369673e88db936053a702f9f0f5f3742c10a2f8add170275e