Samsung Android Personal Environment must be configured to enforce the system application disable list.
An XCCDF Rule
Description
The system application disable list controls user access/execution of all core and pre-installed applications. Core application: Any application integrated into Samsung Android by Google or Samsung. Pre-installed application: Additional non-core applications included in the Samsung Android build by Google, Samsung, or the wireless carrier. Some system applications can compromise DoD data or upload users' information to non-DoD-approved servers. A user must be blocked from using applications that exhibit behavior that can result in compromise of DoD data or DoD user information. The site Administrator must analyze all pre-installed applications on the device and disable all applications not approved for DoD use by configuring the system application disable list. SFR ID: FMT_SMF_EXT.1.1 #47
- ID
- SV-230997r607691_rule
- Version
- KNOX-11-017700
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the Samsung Android device to enforce the system application disable list.
This guidance is only for the Personal Environment of a COPE deployment.
The required configuration is the default configuration when the device is enrolled as an AE deployment.