Skip to content
ATO Pathways
  Log In

Guide to the Secure Configuration of Chromium

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Whitelisted Chromium Extenstions

    Chromium extensions approved for use
    Value
    Show

  • Default Chromium Homepage

    Default homepage for Chromium users
    Value
    Show

  • Chromium

    Chromium is an open-source web browser, powered by WebKit (Blink), and developed by Google. Web browsers such as Chromium are used for a number of ...
    Group
    Show

  • Chromium HTTP Authentication Setting

    Chromium HTTP Authentication Types
    Value
    Show

  • The Default Search provider in Chromium

    The URL for the Default Search provider in Chromium
    Value
    Show

  • Chromium Enabled Plugins

    Chromium Enabled Plugins
    Value
    Show

  • Encrypted Chromium Search URLs

    Encrypted search URL for the Default Search Provider
    Value
    Show

  • Blacklisted Chromium Protocols

    Blacklisted Protocol Schemas in Chromium
    Value
    Show

  • Disable All Extensions by Default

    Extensions are developed by third party sources and are designed to extend Google Chromium's functionality. As an extension can be made by anyone,...
    Rule Unknown Severity
    Show

  • Prevent Desktop Notifications

    Chromium by default allows websites to display notifications on the desktop. To disable this setting, set <code>DefaultNotificationsSetting</code> ...
    Rule Unknown Severity
    Show

  • Enable Online OCSP/CRL Certificate Checks

    Certificates can become compromised, and Chromium should check that the certificates in its store are valid by setting <code>EnableOnlineRevocation...
    Rule Unknown Severity
    Show

  • Block Plugins by Default

    By default, websites are allowed to automatically run plugins. Users should be prompted to allow plugins to execute plugins by setting <code>Defaul...
    Rule Unknown Severity
    Show

  • Enable the Default Search Provider

    By default users, can change search provider settings. To disable this, set <code>DefaultSearchProviderEnabled</code> to <code>true</code> in the C...
    Rule Unknown Severity
    Show

  • Set the Default Search Provider's URL

    Specifies the URL of the default search provider that is to be used. To set the URL of the default search provider, set <code>DefaultSearchProvider...
    Rule Unknown Severity
    Show

  • Disable the 3D Graphics APIs

    Chromium uses WebGL to render graphics using the GPU which allows website access to the GPU. This should be disabled by setting <code>Disable3DAPIs...
    Rule Unknown Severity
    Show

  • Disable the AutoFill Feature

    The AutoFill feature suggests possible matches when users are filling in forms. To disable the AutoFill feature, set <code>AutoFillEnabled</code> t...
    Rule Unknown Severity
    Show

  • Disable Automatic Search And Installation of Plugins

    Chromium will automatically detect, search, and install plugins as required. This should be disabled by setting <code>DisablePluginFinder</code> to...
    Rule Unknown Severity
    Show

  • Disable Background Processing

    Chromium can be set to run at all times and process in the background. This should be disabled by setting <code>BackgroundModeEnabled</code> to <co...
    Rule Unknown Severity
    Show

  • Disable Use of Cleartext Passwords

    Chromium allows users to import and store passwords in cleartext. This should be disabled by setting <code>PasswordManagerAllowShowPasswords</code...
    Rule Unknown Severity
    Show

  • Disable Cloud Print Sharing

    Chromium has cloud sharing capabilities including sharing printers connected to the system. This is done via a proxy. To disable printer sharing, s...
    Rule Unknown Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules