Zebra Android 13 COPE Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
Zebra Android 13 allowlist must be configured to not include applications with the following characteristics: - Back up MD data to non-DOD cloud servers (including user and application access to cloud backup services); - Transmit MD diagnostic data to non-DOD servers; - Voice assistant application if available when MD is locked; - Voice dialing application if available when MD is locked; - Allows synchronization of data or applications between devices associated with user; - Payment processing; and - Allows unencrypted (or encrypted but not FIPS 140-2/140-3 validated) data sharing with other MDs, display screens (screen mirroring), or printers.
Requiring all authorized applications to be in an application allowlist prevents the execution of any applications (e.g., unauthorized, malicious) that are not part of the allowlist. Failure to con...Rule Medium Severity -
Zebra Android 13 must be configured to generate audit records for the following auditable events: Detected integrity violations.
Audit logs enable monitoring of security-relevant events and subsequent forensics when breaches occur. They help identify attacks so that breaches can be prevented or limited in their scope. They f...Rule Medium Severity -
Zebra Android 13 must be configured to enable authentication of personal hotspot connections to the device using a pre-shared key.
If no authentication is required to establish personal hotspot connections, an adversary may be able to use that device to perform attacks on other devices or networks without detection. A sophisti...Rule Medium Severity -
Zebra Android 13 must be configured to disable exceptions to the access control policy that prevent [selection: application processes, groups of application processes] from accessing [selection: all, private] data stored by other [selection: application processes, groups of application processes].
App data sharing gives apps the ability to access the data of other apps for enhanced user functionality. However, sharing also poses a significant risk that unauthorized users or apps will obtain ...Rule Medium Severity -
Zebra Android 13 users must complete required training.
The security posture of Zebra devices requires the device user to configure several required policy rules on their device. User-Based Enforcement (UBE) is required for these controls. In addition, ...Rule Medium Severity -
The Zebra Android 13 work profile must be configured to enforce the system application disable list.
The system application disable list controls user access to/execution of all core and preinstalled applications. Core application: Any application integrated into Zebra Android 13 by Zebra. P...Rule Medium Severity -
Zebra Android 13 must be provisioned as a fully managed device and configured to create a work profile.
The Android Enterprise work profile is the designated application group for the COPE use case. SFR ID: FMT_SMF_EXT.1.1 #47Rule Medium Severity -
The Zebra Android 13 work profile must be configured to disable automatic completion of workspace internet browser text input.
The autofill functionality in the web browser allows the user to complete a form that contains sensitive information, such as personally identifiable information (PII), without previous knowledge o...Rule Medium Severity -
Zebra Android 13 must be configured to disallow configuration of date and time.
Determining the correct time a particular application event occurred on a system is critical when conducting forensic analysis and investigating system events. Periodically synchronizing interna...Rule Medium Severity -
Android 13 devices must be configured to disable the use of third-party keyboards.
Many third-party keyboard applications are known to contain malware. SFR ID: FMT_SMF_EXT.1.1 #47Rule Low Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.