Skip to content
ATO Pathways
  Log In

Guide to the Secure Configuration of Chromium

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Disable Chromium's Ability to Traverse Firewalls

    Chromium has the ability to bypass and ignore the system firewall. This ability should be disabled. To disable this setting, set <code>RemoteAcces...
    Rule Unknown Severity
    Show

  • Disable Data Synchronization to Google

    SyncDisabled to true in the Chromium policy file.
    Rule Unknown Severity
    Show

  • Disable Incognito Mode

    Incognito Mode allows users to browse in private which prevents monitoring and validating user browsing habits. This capability should be disabled ...
    Rule Unknown Severity
    Show

  • Disable Metrics Reporting

    Whenever Chromium crashes, it sends its usage and crash-related data to Google. This should be disabled by setting <code>MetricsReportingEnabled</c...
    Rule Unknown Severity
    Show

  • Disable Network Prediction

    To disable the network prediction feature, set DnsPrefetchingEnabled to false in the Chromium policy file.
    Rule Unknown Severity
    Show

  • Disable Outdated Plugins

    Outdated plugins should be disabled by setting AllowOutdatedPlugins to false in the Chromium policy file.
    Rule Unknown Severity
    Show

  • Disable Chromium Password Manager

    Chromium Password Manager allows the saving and using of passwords in Chromium. This should be disabled by setting <code>PasswordManagerEnabled</co...
    Rule Unknown Severity
    Show

  • Disable All Plugins by Default

    Plugins are developed internally or by third party sources and are designed to extend Google Chromium's functionality. All plugins should be blackl...
    Rule Unknown Severity
    Show

  • Disable Popups

    Chromium allows you to manage whether or not unwanted pop-up windows appear. To disable pop-ups, set <code>DefaultPopupsSetting</code> to <code>2</...
    Rule Unknown Severity
    Show

  • Disable Insecure And Obsolete Protocol Schemas

    Each access to a URL is handled by the browser according to the URL's "scheme". The "scheme" of a URL is the section before the ":". The term "prot...
    Rule Unknown Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules