Microsoft Android 11 must be configured to disable developer modes.
An XCCDF Rule
Description
<VulnDiscussion>Developer modes expose features of the Microsoft Android device that are not available during standard operation. An adversary may leverage a vulnerability inherent in a developer mode to compromise the confidentiality, integrity, and availability of DOD sensitive information. Disabling developer modes mitigates this risk. SFR ID: FMT_SMF_EXT.1.1 #26</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-255179r870675_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Configure the Microsoft Android 11 device to disable developer modes.
On the EMM console:
1. Open "Set user restrictions" section.
2. Toggle "Disallow debugging features" to "On".
3. Open "Set user restrictions on parent" section.