Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-57679 | DTBF-0031 | SV-72089r1_rule | Medium |
Description |
---|
Enables anonymous reporting of usage and crash-related data about Firefox to Mozilla and prevents users from changing this setting. If you enable this setting, anonymous reporting of usage and crash-related data is sent to Mozilla. A crash report could contain sensitive information from the computer's memory. If you disable this setting, anonymous reporting of usage and crash-related data is never sent to Mozilla. If you enable or disable this setting, users cannot change or override this setting in Firefox. If this policy is left not set the setting will be what the user chose upon installation / first run, or anytime the application crashes. |
STIG | Date |
---|---|
Mozilla Firefox | 2017-03-22 |
Check Text ( C-58501r2_chk ) |
---|
Procedure: In about:config, verify that the setting for the following preferences are set and locked. “MOZ_CRASHREPORTER_DISABLE”, set to “1”. Criteria: If the values of the listed Preferences are not set and locked to these settings, then this is a finding. |
Fix Text (F-62881r1_fix) |
---|
Set and lock the following preferences using the “Mozilla.cfg” file: “MOZ_CRASHREPORTER_DISABLE”, set to “1”. |