Background processing must be disabled

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-0017	DTBC-0017	SV-0017r1_rule		Medium

Description
Determines whether a Google Chrome process is started on OS login and keeps running when the last browser window is closed, allowing background apps to remain active. The background process displays an icon in the system tray and can always be closed from there. If this policy is set to True, background mode is enabled and cannot be controlled by the user in the browser settings. If this policy is set to False, background mode is disabled and cannot be controlled by the user in the browser settings. If this policy is left unset, background mode is initially disabled and can be controlled by the user in the browser settings.

Description

Determines whether a Google Chrome process is started on OS login and keeps running when the last browser window is closed, allowing background apps to remain active. The background process displays an icon in the system tray and can always be closed from there. If this policy is set to True, background mode is enabled and cannot be controlled by the user in the browser settings. If this policy is set to False, background mode is disabled and cannot be controlled by the user in the browser settings. If this policy is left unset, background mode is initially disabled and can be controlled by the user in the browser settings.

STIG	Date
Google Chrome STIG Draft	2012-09-25

Details

Check Text ( C-0017r1_chk )
Universal method (Requires Chrome Browser v15 or later): 1. In the omnibox (address bar) type chrome://policy 2. If BackgroundModeEnabled is displayed under the Policy Name column and it is set to false under the Policy Value column, then this is not a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the BackgroundModeEnabled value name does not exist or its value data is not set to 0, then this is a finding.

Check Text ( C-0017r1_chk )

Universal method (Requires Chrome Browser v15 or later):
1. In the omnibox (address bar) type chrome://policy
2. If BackgroundModeEnabled is displayed under the Policy Name column and it is set to false under the Policy Value column, then this is not a finding.

Windows method:
1. Start regedit
2. Navigate to HKLM\Software\Policies\Google\Chrome\
3. If the BackgroundModeEnabled value name does not exist or its value data is not set to 0, then this is a finding.

Fix Text (F-0017r1_fix)
Valid for Chrome Browser version 19 or later. Windows registry: Key Path: HKLM\Software\Policies\Google\Chrome\ Value Name: BackgroundModeEnabled Value Type: Boolean (REG_DWORD) Value Data: 0 Windows group policy: Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Continue running background apps when Google Chrome is closed Policy State: Disabled Policy Value: N/A

Fix Text (F-0017r1_fix)

Valid for Chrome Browser version 19 or later.

Windows registry:
Key Path: HKLM\Software\Policies\Google\Chrome\
Value Name: BackgroundModeEnabled
Value Type: Boolean (REG_DWORD)
Value Data: 0

Windows group policy:
Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\
Policy Name: Continue running background apps when Google Chrome is closed
Policy State: Disabled
Policy Value: N/A