Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-35790 | DTBC-0036 | SV-47077r2_rule | ECSC-1 | Medium |
Description |
---|
"If you set this setting to enabled the automatic search and installation of missing plugins will be disabled in Google Chrome." - Google Chrome Administrators Policy List |
STIG | Date |
---|---|
Google Chrome v24 Windows Benchmark | 2013-03-07 |
Check Text ( http://oval.mitre.org/XMLSchema/oval-definitions-5 ) |
---|
Universal method (Requires Chrome Browser v15 or later): 1. In the omnibox (address bar) type chrome://policy 2. If DisablePluginFinder is not displayed under the Policy Name column or it is not set to true under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the DisablePluginFinder value name does not exist or its value data is not set to 1, then this is a finding. |
Fix Text (F-40338r1_fix) |
---|
Valid for Chrome Browser version 11 or later. Windows registry: Key Path: HKLM\Software\Policies\Google\Chrome\ Value Name: DisablePluginFinder Value Type: Boolean (REG_DWORD) Value Data: 1 Windows group policy: Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Specify whether the plugin finder should be disabled Policy State: Enabled Policy Value: N/A |