Disable the 3D Graphics APIs
An XCCDF Rule
Description
Chromium uses WebGL to render graphics using the GPU which allows website
access to the GPU. This should be disabled by setting Disable3DAPIs
to true in the Chromium policy file.
Rationale
This setting prevents web pages from accessing the graphics processing unit (GPU). Specifically, web pages cannot access the WebGL API and plugins cannot use the Pepper 3D API in order to reduce the attack surface.
- ID
- xccdf_org.ssgproject.content_rule_chromium_disable_3d_graphics_api
- Severity
- Unknown
- References
- Updated
Remediation - Shell Script