TMA-CHROME-1.2.1
Ensure 'Configure the list of domains on which Safe Browsing will not trigger warnings' is set to 'Disabled'
Opis
The setting determines the functionality of Safe Browsing. - Disabled (0): Safe Browsing protection applies to all resources - Enabled (1), with a list of 1 or more sites: Means Safe Browsing will trust the domains you designate. It won't check them for dangerous resources such as phishing, malware, or unwanted software. Rationale: Google Safe Browsing will help protect users from a variety of malicious and fraudulent sites, or download dangerous files. The policy is Disabled when it is not present: the audit prints 'absent' when the list key HKLM\SOFTWARE\Policies\Google\Chrome\SafeBrowsingAllowlistDomains is missing or empty, otherwise the configured entries.
Kako se proverava
Metod provere: Windows registar
$l = @((Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\SafeBrowsingAllowlistDomains' -ErrorAction SilentlyContinue).PSObject.Properties | Where-Object { $_.Name -notlike 'PS*' } | ForEach-Object { "$($_.Value)" }); if ($l.Count -eq 0) { 'absent' } else { 'configured: ' + ($l -join ', ') }- Očekivani izlaz
absent
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Safe Browsing settings\Configure the list of domains on which Safe Browsing will not trigger warnings. = Disabled. Locally, remove the policy entries at HKLM\SOFTWARE\Policies\Google\Chrome\SafeBrowsingAllowlistDomains after reviewing them.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- chromebrowsercis-l1
- Referenca
- CIS Google Chrome Benchmark v3.0.0 - 1.2.1 Ensure 'Configure the list of domains on which Safe Browsing will not trigger warnings' is set to 'Disabled'
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
tmaegis scan --target chrome