BaselineWatch
Desk

GOOG-16-013300 Google Android 16 must disable screen capture.

DISA STIG library Y26M10
All changes in this version
first version loaded CAT III

Maps to CM-6 via CCI-000366

Title

Google Android 16 must disable screen capture.

Control

Review configuration settings to confirm that screen capture has been disabled. This check procedure is performed on the device management tool and the Google Android 16 device. On the MDM console: COBO and COPE: 1. Open Camera, screen capture, and audio section. 2. Verify that the "Disable Screen Capture" setting is enabled. On the managed Google Android 16 device: COBO and COPE: 1. Press the Power button and the volume down button at the same time. 2. Verify that the message "Taking screenshots is blocked by your admin" appears. If screen capture has not been disabled, this is a finding.

Discussion

The screen capture feature could lead to the exposure of sensitive DoW information. SFR ID: FMT_MOF_EXT.1.2 #47

Related controls

CCI-000366

Fix

Install a configuration profile to disable screen capture. On the MDM console, do the following: COBO and COPE: 1. Open Camera, screen capture, and audio section. 2. Enable the "Disable Screen Capture" setting. Configuration API: screenCaptureDisabled