TMA-CHROME-1.2.1
Ensure 'Configure the list of domains on which Safe Browsing will not trigger warnings' is set to 'Disabled'
Açıklama
The setting determines the functionality of Safe Browsing. - Disabled (0): Safe Browsing protection applies to all resources - Enabled (1), with a list of 1 or more sites: Means Safe Browsing will trust the domains you designate. It won't check them for dangerous resources such as phishing, malware, or unwanted software. Rationale: Google Safe Browsing will help protect users from a variety of malicious and fraudulent sites, or download dangerous files. The policy is Disabled when it is not present: the audit prints 'absent' when the list key HKLM\SOFTWARE\Policies\Google\Chrome\SafeBrowsingAllowlistDomains is missing or empty, otherwise the configured entries.
Nasıl denetlenir
Denetim yöntemi: Windows kayıt defteri
$l = @((Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\SafeBrowsingAllowlistDomains' -ErrorAction SilentlyContinue).PSObject.Properties | Where-Object { $_.Name -notlike 'PS*' } | ForEach-Object { "$($_.Value)" }); if ($l.Count -eq 0) { 'absent' } else { 'configured: ' + ($l -join ', ') }- Beklenen çıktı
absent
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Safe Browsing settings\Configure the list of domains on which Safe Browsing will not trigger warnings. = Disabled. Locally, remove the policy entries at HKLM\SOFTWARE\Policies\Google\Chrome\SafeBrowsingAllowlistDomains after reviewing them.
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- chromebrowsercis-l1
- Referans
- CIS Google Chrome Benchmark v3.0.0 - 1.2.1 Ensure 'Configure the list of domains on which Safe Browsing will not trigger warnings' is set to 'Disabled'
Bu ana makineyi denetle
Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.
tmaegis scan --target chrome