Ensure 'Configure the required domain names for remote access clients' is set to 'Enabled' with a domain defined

高级别 1人工审核chrome

说明

Chrome allows the configuration of a list of domains that are allowed to access the user's system. When enabled, remote systems can only connect if they are one of the specified domains listed. Setting this to an empty list (Disabled) allows remote systems from any domain to connect to this user's system. Rationale: Remote assistance connections shall be restricted. The benchmark marks this recommendation Manual (organisation-specific value or not reliably checkable), so it is reported as SKIP with review steps.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Confirm via Group Policy (gpresult /h or the GPMC) that Computer Configuration\Polices\Administrative Templates\Google\Google Chrome\Remote access\Configure the required domain names for remote access clients is configured as the title requires. This registry path will not exist if it is set to Disabled: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\RemoteAccessHostClientDomainList

修复方式

修复方法: 操作指南或基础设施补丁

Configure through Group Policy: Computer Configuration\Polices\Administrative Templates\Google\Google Chrome\Remote access\Configure the required domain names for remote access clients = Enabled and enter an organizational specific domain(s) (e.g. nodomain.local)

属性

操作系统: 任意
标签: chromebrowsercis-l1manual
参考: CIS Google Chrome Benchmark v3.0.0 - 2.8.3 Ensure 'Configure the required domain names for remote access clients' is set to 'Enabled' with a domain defined