TMA-ANDROID-1.11
Do not root a user device
Description
Rooting an Android device means gaining administrative access to the device's system files and settings. This allows users to install custom firmware, modify system files, and perform other advanced operations that are not possible with a standard, unrooted device. The recommended state for this setting is: Do not Root.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Identifying a rooted device is not straightforward. You may need to install a terminal or root checker app to detect rooted devices. Alternatively, the device manufacturer may provide documentation describing how to detect rooting.
How it is fixed
Fix method: Guidance or infrastructure patch
Follow your device manufacturer documentation to completely un-root a user device.
Properties
- Operating systems
- Any
- Tags
- androiddevice-settings
- Reference
- CIS Google Android Benchmark v1.6.0 - 1.11 Do not root a user device