Firefox must be configured to not delete data upon shutdown.

An XCCDF Rule

Description

For diagnostic purposes, data must remain behind when the browser is closed. This is required to meet non-repudiation controls.

ID: SV-252881r879587_rule
Version: FFOX-00-000017
Severity: Medium
References: CCI-000381
Updated: 5 days ago

Remediation Templates

Windows group policy:
1. Open the group policy editor tool with "gpedit.msc".
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Clear data when browser is closed
Policy Name: Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences, Offline Website Data
Policy State: Disabled
Policy Name: LockedPolicy State: Enabled

macOS "plist" file:
Add the following:
<key>SanitizeOnShutdown</key>
<dict>
  <key>Cache</key>
  <false/>
  <key>Cookies</key>
  <false/>
  <key>Downloads</key>
  <false/>
  <key>FormData</key>
  <false/>
  <key>History</key>
  <false/>
  <key>Sessions</key>
  <false/>
  <key>SiteSettings</key>
  <false/>
  <key>OfflineApps</key>
  <false/>
  <key>Locked</key>
  <true/>
</dict>

Linux "policies.json" file:
Add the following in the policies section:
"SanitizeOnShutdown": {
  "Cache": false,
  "Cookies": false,
  "Downloads": false,
  "FormData": false,
  "History": false,
  "Sessions": false,
  "SiteSettings": false,
  "OfflineApps": false,
  "Locked": true 
}

Firefox must be configured to not delete data upon shutdown.

Description

Remediation Templates

A Manual Procedure