Firefox must be configured to not automatically check for updated versions of installed search plugins.

An XCCDF Rule

Description

Updates must be controlled and installed from authorized and trusted servers. This setting overrides a number of other settings that may direct the application to access external URLs.

ID: SV-251548r879587_rule
Version: FFOX-00-000004
Severity: Medium
References: CCI-000381
Updated: 4 days ago

Remediation Templates

Windows group policy:
1. Open the group policy editor tool with "gpedit.msc".
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\
Policy Name: Preferences
Policy State: Enabled
Policy Value:{
  "browser.search.update": {
    "Value": false,
    "Status": "locked"
  }
}

macOS "plist" file:
Add the following:
<key>Preferences</key>
<dict>
  <key>browser.search.update</key>
  <dict>
    <key>Value</key>
    <false/>
    <key>Status</key>
    <string>locked</string>
  </dict>
</dict>

Linux "policies.json" file:
Add the following in the policies section:
"Preferences": {
  "browser.search.update": {
    "Value": false,
    "Status": "locked"
  }
}

Firefox must be configured to not automatically check for updated versions of installed search plugins.

Description

Remediation Templates

A Manual Procedure