TMA-CHROME-1.2.1
Ensure 'Configure the list of domains on which Safe Browsing will not trigger warnings' is set to 'Disabled'
Опис
The setting determines the functionality of Safe Browsing. - Disabled (0): Safe Browsing protection applies to all resources - Enabled (1), with a list of 1 or more sites: Means Safe Browsing will trust the domains you designate. It won't check them for dangerous resources such as phishing, malware, or unwanted software. Rationale: Google Safe Browsing will help protect users from a variety of malicious and fraudulent sites, or download dangerous files. The policy is Disabled when it is not present: the audit prints 'absent' when the list key HKLM\SOFTWARE\Policies\Google\Chrome\SafeBrowsingAllowlistDomains is missing or empty, otherwise the configured entries.
Како се проверава
Метод провере: Windows регистар
$l = @((Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\SafeBrowsingAllowlistDomains' -ErrorAction SilentlyContinue).PSObject.Properties | Where-Object { $_.Name -notlike 'PS*' } | ForEach-Object { "$($_.Value)" }); if ($l.Count -eq 0) { 'absent' } else { 'configured: ' + ($l -join ', ') }- Очекивани излаз
absent
Како се исправља
Метод исправке: Смерница или закрпа инфраструктуре
Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Safe Browsing settings\Configure the list of domains on which Safe Browsing will not trigger warnings. = Disabled. Locally, remove the policy entries at HKLM\SOFTWARE\Policies\Google\Chrome\SafeBrowsingAllowlistDomains after reviewing them.
Својства
- Оперативни системи
- Било који
- Ознаке
- chromebrowsercis-l1
- Референца
- CIS Google Chrome Benchmark v3.0.0 - 1.2.1 Ensure 'Configure the list of domains on which Safe Browsing will not trigger warnings' is set to 'Disabled'
Проверите овај рачунар
Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.
tmaegis scan --target chrome