Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Disable Firefox Sync
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-57673 | DTBF-0027 | SV-72083r1_rule | Medium |
| Description |
|---|
| Disables data synchronization in Firefox using Mozilla-hosted synchronization services and prevents users from changing this setting. If you enable this setting, users cannot change or override this setting in Firefox. If this policy is left not set the user will be able to enable Firefox Sync. Firefox Sync is used to sync information between different user devices, this data is then stored on Mozilla owned servers. The synced data may consist of information such as email, calendars, viewing history, etc. This feature must be disabled because the organization does not have control over the servers the data is stored on. |
| STIG | Date |
|---|---|
| Mozilla Firefox | 2017-03-22 |
Details
| Check Text ( C-58495r3_chk ) |
|---|
| Procedure: In about:config, verify the preferences: “services.sync.autoconnect”, set to “false”; “services.sync.engine.addons”, set to “false”; “services.sync.engine.bookmarks”, set to “false”; “services.sync.engine.history”, set to “false”; “services.sync.engine.passwords”, set to “false”; “services.sync.engine.prefs”, set to “false”; “services.sync.engine.tabs”, set to “false”. Criteria: If the values of the listed Preferences are not set and locked to these settings, then this is a finding. |
| Fix Text (F-62875r1_fix) |
|---|
| Set and lock the following preferences using the “Mozilla.cfg” file: “services.sync.autoconnect”, set to “false”; “services.sync.engine.addons”, set to “false”; “services.sync.engine.bookmarks”, set to “false”; “services.sync.engine.history”, set to “false”; “services.sync.engine.passwords”, set to “false”; “services.sync.engine.prefs”, set to “false”; “services.sync.engine.tabs”, set to “false”. |