UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Site data must not be wiped on closing the browser


Overview

Finding ID Version Rule ID IA Controls Severity
V-0016 DTBC-0016 SV-0016r1_rule Medium
Description
This policy is an override for the "Clear cookies and other site data when I close my browser" content settings option. When set to enabled Google Chrome will delete all locally stored data from the browser when it is shut down. If set to disabled site data will not be cleared on exit. If this policy is left not set Google Chrome will use the default which is to preserve site data on shut down and the user will be able to change this. If the "RestoreOnStartup" policy is set to restore URLs from previous sessions this policy will not clear cookies or other data relevant to restoring the previous browsing session completely.
STIG Date
Google Chrome STIG Draft 2012-09-25

Details

Check Text ( C-0016r1_chk )
Universal method(Requires Chrome Browser v15 or later):
1. In the omnibox(address bar) type chrome://policy
2. If the policy "ClearSiteDataOnExit" is shown and is set to false, this is not a finding.

Windows:
Start regedit
Navigate to HKLM\Software\Policies\Google\Chrome\ClearSiteDataOnExit
If this key does not exist or is not set to 0 this is a finding.
Fix Text (F-0016r1_fix)

Valid for Chrome Browser version 11 or later.
Windows Registry:
Registry Path: HKLM\Software\Policies\Google\Chrome\
Registry Key: ClearSiteDataOnExit
Key Type: Boolean (REG_DWORD)
Set the value of the registry key to 0

Windows group policy:
Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\
Policy Name: "Clear site data on browser shutdown"
Policy State: Disabled
Policy Value: N/A