Disable Background Processing
An XCCDF Rule
Description
Chromium can be set to run at all times and process in the background. This should be disabled by settingBackgroundModeEnabled
to false
in the Chromium policy file.
Rationale
There is two reasons that this is not wanted. First, it can tie up system resources that might otherwise be needed. Second, it does not make it obvious to the user that it is running and poorly written extensions could cause instability on the system.
- ID
- xccdf_org.ssgproject.content_rule_chromium_disable_background_processing
- Severity
- Unknown
- References
- Updated
Remediation Templates
A Shell Script
if ! grep -q BackgroundModeEnabled /etc/chromium/policies/managed/chrome_stig_policy.json; then
sed -i -e '/{/a \ "'BackgroundModeEnabled'": 'false',' /etc/chromium/policies/managed/chrome_stig_policy.json
else
sed -i -e 's/\"'BackgroundModeEnabled'.*/\"'BackgroundModeEnabled'\": 'false',/g' /etc/chromium/policies/managed/chrome_stig_policy.json
fi