DISA STIGS Viewer

Google Android 13 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the device.

Overview

Finding ID Version Rule ID IA Controls Severity
V-254776 GOOG-13-007700 SV-254776r958390_rule   Low
Description
STIG Date
Google Android 13 COPE Security Technical Implementation Guide 2024-12-04

Details

Check Text (C-58387r862708_chk)
The DOD warning banner can be displayed by either of the following methods (required text is found in the Vulnerability Discussion):

1. By placing the DOD warning banner text in the user agreement signed by each managed Android 13 device user (preferred method).
2. By configuring the warning banner text on the EMM console and installing the banner on each managed Android 13 mobile device.

Determine which method is used at the Google Android 13 device site and follow the appropriate validation procedure below.

Validation Procedure for Method #1:
Review the signed user agreements for several Google Android 13 device users and verify the agreement includes the required DOD warning banner text.

Validation Procedure for Method #2:
On the EMM Console:

COBO:

1. Open "Lock screen restrictions".
2. Select "Lock screen message".
3. Verify the message.

COPE:

1. Open "Lock screen restrictions".
2. Select "Personal Profile".
3. Select "Lock screen message".
4. Verify the message.

If, for Method #1, the required warning banner text is not on all signed user agreements reviewed, or for Method #2, the EMM console device policy is not set to display a warning banner with the appropriate designated wording or on the managed Google Android 13 device, the device policy is not set to display a warning banner with the appropriate designated wording, this is a finding.
Fix Text (F-58333r862709_fix)
Configure the DOD warning banner by either of the following methods (required text is found in the Vulnerability Discussion):

1. By placing the DOD warning banner text in the user agreement signed by each Google Android 13 device user (preferred method).
2. By configuring the warning banner text on the EMM console and installing the banner on each Google Android 13 mobile device.

On the EMM Console:

COBO:

1. Open "Lock screen restrictions".
2. Select "Lock screen message".
3. Enter in message.

COPE:

1. Open "Lock screen restrictions".
2. Select "Personal Profile".
3. Select "Lock screen message".
4. Enter in message.