TMA-CHROME-1.2.1
Ensure 'Configure the list of domains on which Safe Browsing will not trigger warnings' is set to 'Disabled'
Deskripsi
The setting determines the functionality of Safe Browsing. - Disabled (0): Safe Browsing protection applies to all resources - Enabled (1), with a list of 1 or more sites: Means Safe Browsing will trust the domains you designate. It won't check them for dangerous resources such as phishing, malware, or unwanted software. Rationale: Google Safe Browsing will help protect users from a variety of malicious and fraudulent sites, or download dangerous files. The policy is Disabled when it is not present: the audit prints 'absent' when the list key HKLM\SOFTWARE\Policies\Google\Chrome\SafeBrowsingAllowlistDomains is missing or empty, otherwise the configured entries.
Cara pemeriksaan
Metode audit: Registry Windows
$l = @((Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\SafeBrowsingAllowlistDomains' -ErrorAction SilentlyContinue).PSObject.Properties | Where-Object { $_.Name -notlike 'PS*' } | ForEach-Object { "$($_.Value)" }); if ($l.Count -eq 0) { 'absent' } else { 'configured: ' + ($l -join ', ') }- Output yang diharapkan
absent
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Safe Browsing settings\Configure the list of domains on which Safe Browsing will not trigger warnings. = Disabled. Locally, remove the policy entries at HKLM\SOFTWARE\Policies\Google\Chrome\SafeBrowsingAllowlistDomains after reviewing them.
Properti
- Sistem operasi
- Apa saja
- Tag
- chromebrowsercis-l1
- Referensi
- CIS Google Chrome Benchmark v3.0.0 - 1.2.1 Ensure 'Configure the list of domains on which Safe Browsing will not trigger warnings' is set to 'Disabled'
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
tmaegis scan --target chrome