Site data must not be wiped on closing the browser
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-0016 | DTBC-0016 | SV-0016r1_rule | Medium |
| Description |
|---|
| This policy is an override for the "Clear cookies and other site data when I close my browser" content settings option. When set to enabled Google Chrome will delete all locally stored data from the browser when it is shut down. If set to disabled site data will not be cleared on exit. If this policy is left not set Google Chrome will use the default which is to preserve site data on shut down and the user will be able to change this. If the "RestoreOnStartup" policy is set to restore URLs from previous sessions this policy will not clear cookies or other data relevant to restoring the previous browsing session completely. |
| STIG | Date |
|---|---|
| Google Chrome STIG Draft | 2012-09-25 |
Details
| Check Text ( C-0016r1_chk ) |
|---|
| Universal method(Requires Chrome Browser v15 or later): 1. In the omnibox(address bar) type chrome://policy 2. If the policy "ClearSiteDataOnExit" is shown and is set to false, this is not a finding. Windows: Start regedit Navigate to HKLM\Software\Policies\Google\Chrome\ClearSiteDataOnExit If this key does not exist or is not set to 0 this is a finding. |
| Fix Text (F-0016r1_fix) |
|---|
| Valid for Chrome Browser version 11 or later. Windows Registry: Registry Path: HKLM\Software\Policies\Google\Chrome\ Registry Key: ClearSiteDataOnExit Key Type: Boolean (REG_DWORD) Set the value of the registry key to 0 Windows group policy: Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: "Clear site data on browser shutdown" Policy State: Disabled Policy Value: N/A |