The operating system must employ automated mechanisms to centrally apply configuration settings.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-33054	SRG-OS-000092-NA	SV-43452r1_rule		Medium

Description
Configuration settings are the configurable security-related parameters of operating system. Rationale for non-applicability: This vulnerability is better addressed by implementing CCI-000370, which states the mobile operating system must employ the capability of a Mobile Device Manager (MDM) to centrally manage configuration settings, including security policies. These security policies include policy related to discretionary access controls.

Description

Configuration settings are the configurable security-related parameters of operating system. Rationale for non-applicability: This vulnerability is better addressed by implementing CCI-000370, which states the mobile operating system must employ the capability of a Mobile Device Manager (MDM) to centrally manage configuration settings, including security policies. These security policies include policy related to discretionary access controls.

STIG	Date
Mobile Operating System Security Requirements Guide	2013-04-12

Details

Check Text ( C-41323r1_chk )
This requirement is NA for the Mobile OS SRG.

Fix Text (F-36954r1_fix)
The requirement is NA. No fix is required.