Disable Data Synchronization to Google
An XCCDF Rule
Description
SyncDisabled
to true
in the Chromium policy file.
Rationale
Google Sync is used to sync information between different user devices, this data is then stored on Google owned servers. The synced data may consist of information such as email, calendars, viewing history, etc. This feature must be disabled because the organization does not have control over the servers the data is stored on.
- ID
- xccdf_org.ssgproject.content_rule_chromium_disable_google_sync
- Severity
- Unknown
- References
- Updated
Remediation Templates
A Shell Script
if ! grep -q SyncDisabled /etc/chromium/policies/managed/chrome_stig_policy.json; then
sed -i -e '/{/a \ "'SyncDisabled'": 'true',' /etc/chromium/policies/managed/chrome_stig_policy.json
else
sed -i -e 's/\"'SyncDisabled'.*/\"'SyncDisabled'\": 'true',/g' /etc/chromium/policies/managed/chrome_stig_policy.json
fi