Samsung Android 15 must implement the management setting: disable Camera.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-277016 | PP-MDF-993300 | KNOX-15-011500 | SV-277016r1134498_rule | 2025-09-02 | 1 |
| Description |
|---|
| Authorizing official (AO) approval is required before the mobile device camera can be enabled for a specific user or group of users, based on a risk assessment of the operational environment. Camera use may lead to the exposure of sensitive DOD information in some operational environments. SFR ID: FMT_MOF_EXT.1.2 #47 |
| ℹ️ Check |
|---|
| Determine if the site AO has approved the use of device cameras. Look for a document showing approval for a specific user or group of users. If not approved, review configuration settings to confirm "Allow Camera" is disabled. If approved, this requirement is not applicable. Review configuration settings to confirm the device camera has been disabled. This check procedure is performed on the device management tool and the Samsung Android 15 device. On the MDM console: COBO and COPE: 1. Open "Camera". 2. Verify that "disable camera" setting is disabled. On the managed Samsung Android 15 device: COBO and COPE: Verify that the camera cannot be used on the mobile device. If the device camera has not been disabled, this is a finding. |
| ✔️ Fix |
|---|
| If the AO has not approved the use of Samsung device camera, configure Samsung Android 15 to disable the device camera. On the MDM console: COBO and COPE: 1. Open "Camera". 2. Select "Disable camera". API: disableCamera |