Skip to content
Log In

Google Android 14 COBO Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • PP-MDF-333230

    Group
    Show

  • Google Android 14 must be configured to disable USB mass storage mode.

    USB mass storage mode enables the transfer of data and software from one device to another. This software can include malware. When USB mass storage is enabled on a mobile device, it becomes a pote...
    Rule Medium Severity
    Show

  • PP-MDF-333240

    Group
    Show

  • Google Android 14 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

    Data on mobile devices is protected by numerous mechanisms, including user authentication, access control, and cryptography. When the data is backed up to an external system (either locally connect...
    Rule Medium Severity
    Show

  • PP-MDF-333250

    Group
    Show

  • PP-MDF-333290

    Group
    Show

  • Google Android 14 must be configured to disable multiuser modes.

    Multiuser mode allows multiple users to share a mobile device by providing a degree of separation between user data. To date, no mobile device with multiuser mode features meets DOD requirements fo...
    Rule Medium Severity
    Show

  • PP-MDF-333320

    Group
    Show

  • Google Android 14 must be configured to disable all Bluetooth profiles except for HSP (Headset Profile), HFP (Hands-Free Profile), SPP (Serial Port Profile), A2DP (Advanced Audio Distribution Profile), AVRCP (Audio/Video Remote Control Profile), and PBAP (Phone Book Access Profile).

    Some Bluetooth profiles provide the capability for remote transfer of sensitive DOD data without encryption or otherwise do not meet DOD IT security policies and therefore must be disabled. SFR ID...
    Rule Low Severity
    Show

  • PP-MDF-333330

    Group
    Show

  • Google Android 14 must be configured to disable ad hoc wireless client-to-client connection capability.

    Ad hoc wireless client-to-client connections allow mobile devices to communicate with each other directly, circumventing network security policies and making the traffic invisible. This could allow...
    Rule Medium Severity
    Show

  • PP-MDF-993300

    Group
    Show

  • PP-MDF-993300

    Group
    Show

  • PP-MDF-993300

    Group
    Show

  • Google Android 14 must have the DOD root and intermediate PKI certificates installed.

    DOD root and intermediate PKI certificates are used to verify the authenticity of PKI certificates of users and web services. If the root and intermediate certificates are not available, an adversa...
    Rule Medium Severity
    Show

  • PP-MDF-993300

    Group
    Show

  • PP-MDF-993300

    Group
    Show

  • Google Android 14 must be configured to disallow configuration of date and time.

    Determining the correct time a particular application event occurred on a system is critical when conducting forensic analysis and investigating system events. Periodically synchronizing interna...
    Rule Medium Severity
    Show

  • PP-MDF-993300

    Group
    Show

  • Android 14 devices must have the latest available Google Android 14 operating system installed.

    Required security features are not available in earlier operating system versions. In addition, there may be known vulnerabilities in earlier versions. SFR ID: FMT_SMF_EXT.1.1 #47
    Rule High Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules