Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-33270 | SRG-OS-000259-MOS-000129 | SV-43689r1_rule | Medium |
Description |
---|
When dealing with change control issues, it should be noted that any changes to the hardware, software, and/or firmware components of the operating system can potentially have significant effects on the overall security of the system. Only authorized individuals must be allowed to obtain access to mobile device components for purposes of initiating changes, including upgrades and modifications. |
STIG | Date |
---|---|
Mobile Operating System Security Requirements Guide | 2013-04-12 |
Check Text ( C-41567r1_chk ) |
---|
Examine the mobile operating system configuration for prohibiting modifications to software libraries unless performed as part of a software installation or update from a trusted source. If modifications are allowed to software libraries outside of software installation or update, this is a finding. |
Fix Text (F-37200r1_fix) |
---|
Configure the mobile operating system to prohibit modifications to software libraries unless performed as part of a software installation or update from a trusted source. |