← Back to Samsung Android OS 17 with Knox 3.x COPE Security Technical Implementation Guide

V-286465

CAT III (Low)

Samsung Android 17 must disable screen capture.

Rule ID

SV-286465r1256415_rule

STIG

Samsung Android OS 17 with Knox 3.x COPE Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000366

Discussion

The feature screen capture could lead to the exposure of sensitive DoW information. SFR ID: FMT_MOF_EXT.1.2 #47

Check Content

Review configuration settings to confirm screen capture has been disabled.

This check procedure is performed on the device management tool and the Samsung Android 17 device.

On the MDM console:

COBO/COPE procedures:

1. Open Camera, screen capture, and audio section.
2. Verify that "Disable Screen Capture" setting is enabled.

On the managed Samsung Android 17 device: 

COBO:

1. Press the power button and the volume down button at the same time. Verify that the message "Taking screenshots is blocked by your admin" is displayed.

COPE:

1. Open a work profile app.
2. Press the power button and the volume down button at the same time. Verify that the message "Taking screenshots is blocked by your admin" is displayed.

If screen capture has not been disabled, this is a finding.

Fix Text

Configure Samsung Android 17 to disable screen capture.

On the MDM console, do the following:

COBO procedures:

1. Open Camera, screen capture, and audio section.
2. Enable the "Disable Screen Capture" setting.

COPE procedures:

1. Open Camera, screen capture, and audio section.
2. Enable the "Disable Screen Capture" setting.