TMAegis
More rules for android

TMA-ANDROID-1.25

Review app permissions periodically

LowLevel 1Manual reviewandroid

Description

Review device app's permissions periodically. App permissions allow control over which capabilities or information apps could access on the device. Permissions can extend from using device hardware to accessing data. The recommended state for this setting is: Review app permissions regularly.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Follow the below steps to review app permissions: phone's Settings app > Apps & notifications > See all apps > on each permission and review the apps that have them.

How it is fixed

Fix method: Guidance or infrastructure patch

Follow the below steps to set app permissions appropriately: phone's Settings app > Apps & notifications > App permissions > on each permission and review the apps that have them > Disable the app permissions that are over-permissive.

Properties

Operating systems
Any
Tags
androiddevice-settings
Reference
CIS Google Android Benchmark v1.6.0 - 1.25 Review app permissions periodically