Site data must not be wiped on closing the browser

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35763	DTBC-0016	SV-47050r2_rule	ECSC-1	Medium

Description
"This policy is an override for the "Clear cookies and other site data when I close my browser" content settings option. When set to enabled Google Chrome will delete all locally stored data from the browser when it is shut down. If set to disabled site data will not be cleared on exit. If this policy is left not set Google Chrome will use the default which is to preserve site data on shut down and the user will be able to change this. If the "RestoreOnStartup" policy is set to restore URLs from previous sessions this policy will not clear cookies or other data relevant to restoring the previous browsing session completely." - Google Chrome Administrators Policy List The site data must be retained for forensics purposes. If a system is compromised, it is important to have as much information available as possible to ensure that it can be determined how the system was compromised.

Description

"This policy is an override for the "Clear cookies and other site data when I close my browser" content settings option. When set to enabled Google Chrome will delete all locally stored data from the browser when it is shut down. If set to disabled site data will not be cleared on exit. If this policy is left not set Google Chrome will use the default which is to preserve site data on shut down and the user will be able to change this. If the "RestoreOnStartup" policy is set to restore URLs from previous sessions this policy will not clear cookies or other data relevant to restoring the previous browsing session completely." - Google Chrome Administrators Policy List The site data must be retained for forensics purposes. If a system is compromised, it is important to have as much information available as possible to ensure that it can be determined how the system was compromised.

STIG	Date
Google Chrome v24 Windows Benchmark	2013-03-07

Details

Check Text ( http://oval.mitre.org/XMLSchema/oval-definitions-5 )
Universal method(Requires Chrome Browser v15 or later): 1. In the omnibox(address bar) type chrome://policy 2. If the policy "ClearSiteDataOnExit" is not shown or it is not set to false, this is a finding. Windows: Start regedit Navigate to HKLM\Software\Policies\Google\Chrome\ClearSiteDataOnExit If this key does not exist or is not set to 0 this is a finding

Fix Text (F-40309r1_fix)
Universal method(Requires Chrome Browser v15 or later): 1. In the omnibox(address bar) type chrome://policy 2. If the policy "ClearSiteDataOnExit" is not shown or it is not set to false, this is a finding. Windows: Start regedit Navigate to HKLM\Software\Policies\Google\Chrome\ClearSiteDataOnExit If this key does not exist or is not set to 0 this is a finding