LG Android 6.x must not allow use of developer modes.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-66821	LGA6-20-101001	SV-81311r2_rule		Medium

Description
Developer modes expose features of the mobile operating system that are not available during standard operation. An adversary may leverage a vulnerability inherently in developer mode to compromise the confidentiality, integrity, and availability of DoD-sensitive information. Disabling developer modes mitigates this risk. SFR ID: FMT_SMF_EXT.1.1 #24

STIG	Date
LG Android 6.x Security Technical Implementation Guide	2019-02-21

Details

Check Text ( C-67471r2_chk )
This validation procedure is performed on both the MDM Administration Console and the LG Android device. On the MDM console, do the following: 1. Ask the MDM administrator to display the "Allow developer modes" setting in the MDM console. 2. Verify the setting is disabled. 3. Verify the policy has been assigned to all groups. On the LG Android device: 1. Unlock the device. 2. Navigate to Settings >> General >> About Phone >> Software info >> Build number. 3. Push "Build number" multiple times until a pop-up menu display indicates developer option unavailable by server policy. If on the MDM console and the "Allow developer modes" setting is enabled or on the LG Android device the developer mode is available, this is a finding.

Check Text ( C-67471r2_chk )

This validation procedure is performed on both the MDM Administration Console and the LG Android device.

On the MDM console, do the following:

1. Ask the MDM administrator to display the "Allow developer modes" setting in the MDM console.
2. Verify the setting is disabled.
3. Verify the policy has been assigned to all groups.

On the LG Android device:

1. Unlock the device.
2. Navigate to Settings >> General >> About Phone >> Software info >> Build number.
3. Push "Build number" multiple times until a pop-up menu display indicates developer option unavailable by server policy.

If on the MDM console and the "Allow developer modes" setting is enabled or on the LG Android device the developer mode is available, this is a finding.

Fix Text (F-72921r2_fix)
Configure the mobile operating system to disable developer modes. On the MDM Administration Console, disable "Allow Developer Modes".