TMA-ANDROID-1.19
Ensure 'Ask for unlock pattern/PIN/password before unpinning' is set to 'Enabled'
Description
A user can pin an app and hand the device to a friend. With the screen pinned, the friend can use only that app. To use the other apps again, the user can unpin the screen. The recommended state for this setting is: Enabled.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Follow the below steps to verify that Ask for pattern/PIN/password before unpinning setting is Enabled: phone's Settings app > Security > Advanced > Screen pinning > If Screen Pinning is On, then verify that Ask for pattern/PIN/password before unpinning setting is Enabled.
How it is fixed
Fix method: Guidance or infrastructure patch
Follow the below steps to enable Ask for pattern/PIN/password before unpinning: phone's Settings app > Security > Advanced > Screen pinning > If you are using Screen Pinning, then toggle Ask for pattern/PIN/password before unpinning setting to ON position.
Properties
- Operating systems
- Any
- Tags
- androiddevice-settings
- Reference
- CIS Google Android Benchmark v1.6.0 - 1.19 Ensure 'Ask for unlock pattern/PIN/password before unpinning' is set to 'Enabled'