Motorola Android Pie devices must have a NIAP-validated Motorola Android Pie operating system installed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-230109	MOTO-09-010900	SV-230109r569708_rule		High

Description
Required security features are not available in earlier operating system versions. In addition, there may be known vulnerabilities in earlier versions. SFR ID: FMT_SMF_EXT.1.1 #47

STIG	Date
Motorola Android 9.x COPE Security Technical Implementation Guide	2020-10-16

Details

Check Text ( C-32424r538323_chk )
Review device configuration settings to confirm that version LEXL11 NIAP-approved build number (based on Android OS 9.0) is PIE.L11_P_R30.21.10 and Kernel version is 4.4.153. See: https://www.niap-ccevs.org/Product/Compliant.cfm?PID=11002 This procedure is performed on both the MDM console and the Motorola Android Pie device. In the MDM management console, review the version of Motorola Android Pie installed on a sample of managed devices. On the Android Pie device, to see the installed operating system version: 1. Open Settings. 2. Tap "About phone". 3. Verify "Build number". If the installed version of the Android operating system on any reviewed Motorola device is not the latest released by the wireless carrier, this is a finding. See Motorola's Android operating system patch website: https://source.android.com/security/bulletin/ If the installed version of the Android Pie operating system is not the NIAP-approved version, this is a finding.

Check Text ( C-32424r538323_chk )

Review device configuration settings to confirm that version LEXL11 NIAP-approved build number (based on Android OS 9.0) is PIE.L11_P_R30.21.10 and Kernel version is 4.4.153. See: https://www.niap-ccevs.org/Product/Compliant.cfm?PID=11002

This procedure is performed on both the MDM console and the Motorola Android Pie device.

In the MDM management console, review the version of Motorola Android Pie installed on a sample of managed devices.

On the Android Pie device, to see the installed operating system version:
1. Open Settings.
2. Tap "About phone".
3. Verify "Build number".

If the installed version of the Android operating system on any reviewed Motorola device is not the latest released by the wireless carrier, this is a finding.

See Motorola's Android operating system patch website: https://source.android.com/security/bulletin/

If the installed version of the Android Pie operating system is not the NIAP-approved version, this is a finding.

Fix Text (F-32402r538324_fix)
Install the latest released version of the Motorola Android Pie operating system on all managed Motorola devices. For Motorola Android Pie, LEXL11 NIAP-approved build number (based on Android OS 9.0) is PIE.L11_P_R30.21.10, and Kernel version is 4.4.153. See: https://www.niap-ccevs.org/Product/Compliant.cfm?PID=11002 LEX L11 current version: PIE.L11_P_30.22.01 is based on the LEX L11 NIAP version, with small additions. The changes are dedicated to support Verizon Wireless and AT&T carriers' requirements only.

Fix Text (F-32402r538324_fix)

Install the latest released version of the Motorola Android Pie operating system on all managed Motorola devices.

For Motorola Android Pie, LEXL11 NIAP-approved build number (based on Android OS 9.0) is PIE.L11_P_R30.21.10, and Kernel version is 4.4.153. See: https://www.niap-ccevs.org/Product/Compliant.cfm?PID=11002

LEX L11 current version: PIE.L11_P_30.22.01 is based on the LEX L11 NIAP version, with small additions. The changes are dedicated to support Verizon Wireless and AT&T carriers' requirements only.