Skip to content

Upstream STIG for Google Chromium

Rules and Groups employed by this XCCDF Profile

  • Disable All Plugins by Default

    Plugins are developed internally or by third party sources and are designed to extend Google Chromium's functionality. All plugins should be blackl...
    Rule Unknown Severity
  • Disable Popups

    Chromium allows you to manage whether or not unwanted pop-up windows appear. To disable pop-ups, set <code>DefaultPopupsSetting</code> to <code>2</...
    Rule Unknown Severity
  • Disable Insecure And Obsolete Protocol Schemas

    Each access to a URL is handled by the browser according to the URL's "scheme". The "scheme" of a URL is the section before the ":". The term "prot...
    Rule Unknown Severity
  • Disable Saved Passwords

    Disable by setting ImportSavedPasswords to false in the Chromium policy file.
    Rule Unknown Severity
  • Disable Search Suggestion

    Chromium tries to guess what users are searching for when users enter search data in the search Omnibox. This should be disabled by setting <code>...
    Rule Unknown Severity
  • Disable Session Cookies

    To disable session only cookies sites, set CookiesSessionOnlyForUrls to none in the Chromium policy file.
    Rule Unknown Severity
  • Disable 3rd Party Cookies

    Third party cookies should be be enabled. To disable third party cookies, set <code>BlockThirdPartyCookies</code> to <code>true</code> in the Chrom...
    Rule Unknown Severity
  • Disable Location Tracking

    Location tracking is enabled by default and can track user's browsing habits. Location tracking should be disabled by setting <code>DefaultGeolocat...
    Rule Unknown Severity
  • Enable Only Approved Plugins

    An organization might need to use an internal or third party developed plugins. Any organizationally approved plugin should be enabled. To enable a...
    Rule Unknown Severity
  • Enable Saving the Browser History

    Users can enable or disable the saving of browser history in Chromium. Browser history should be retained by setting <code>SavingBrowserHistoryDisa...
    Rule Unknown Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules