Skip to content

Guide to the Secure Configuration of Chromium

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Disable Saved Passwords

    Disable by setting ImportSavedPasswords to false in the Chromium policy file.
    Rule Unknown Severity
  • Disable Search Suggestion

    Chromium tries to guess what users are searching for when users enter search data in the search Omnibox. This should be disabled by setting <code>...
    Rule Unknown Severity
  • Disable Session Cookies

    To disable session only cookies sites, set CookiesSessionOnlyForUrls to none in the Chromium policy file.
    Rule Unknown Severity
  • Disable 3rd Party Cookies

    Third party cookies should be be enabled. To disable third party cookies, set <code>BlockThirdPartyCookies</code> to <code>true</code> in the Chrom...
    Rule Unknown Severity
  • Disable Location Tracking

    Location tracking is enabled by default and can track user's browsing habits. Location tracking should be disabled by setting <code>DefaultGeolocat...
    Rule Unknown Severity
  • Enable Only Approved Plugins

    An organization might need to use an internal or third party developed plugins. Any organizationally approved plugin should be enabled. To enable a...
    Rule Unknown Severity
  • Enable Saving the Browser History

    Users can enable or disable the saving of browser history in Chromium. Browser history should be retained by setting <code>SavingBrowserHistoryDisa...
    Rule Unknown Severity
  • Enable Encrypted Searching

    Specifies the URL of the search engine used when doing a default search. The URL should contain the string <code>{searchTerms}</code>. To set the U...
    Rule Unknown Severity
  • Enable the Safe Browsing Feature

    Chromium has the capability to check URLs for known malware and phishing associated with websites through the Safe Browsing Feature. This can be ...
    Rule Unknown Severity
  • Enable Only Approved Extensions

    An organization might need to use an internal or third party developed extension. Any organizationally approved extenstion should be enabled. To en...
    Rule Unknown Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules