Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-19742 | DTBF090 | SV-21888r1_rule | Medium |
Description |
---|
Set this to false to disable checking for updated versions of the Extensions/Themes. Automatic updates from untrusted sites puts the enclave at risk of attack and may override security settings. |
STIG | Date |
---|---|
Mozilla FireFox | 2012-09-05 |
Check Text ( C-24188r1_chk ) |
---|
Type "about:config" in the browser window. Verify the preference “extensions.update.enabled” is set to "false" and locked. Criteria: If the parameter is set incorrectly, then this is a finding. If this setting is not locked, then this is a finding. |
Fix Text (F-20415r1_fix) |
---|
Set the preference “extensions.update.enabled” value to "false" and lock the preference to prevent change by the user. |