Disable Firefox Sync

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-57673	DTBF-0027	SV-72083r1_rule		Medium

Description

Disables data synchronization in Firefox using Mozilla-hosted synchronization services and prevents users from changing this setting. If you enable this setting, users cannot change or override this setting in Firefox. If this policy is left not set the user will be able to enable Firefox Sync. Firefox Sync is used to sync information between different user devices, this data is then stored on Mozilla owned servers. The synced data may consist of information such as email, calendars, viewing history, etc. This feature must be disabled because the organization does not have control over the servers the data is stored on.

STIG	Date
Mozilla Firefox	2017-03-22

Details

Check Text ( C-58495r3_chk )

Procedure: In about:config, verify the preferences: “services.sync.autoconnect”, set to “false”; “services.sync.engine.addons”, set to “false”; “services.sync.engine.bookmarks”, set to “false”; “services.sync.engine.history”, set to “false”; “services.sync.engine.passwords”, set to “false”; “services.sync.engine.prefs”, set to “false”; “services.sync.engine.tabs”, set to “false”. Criteria: If the values of the listed Preferences are not set and locked to these settings, then this is a finding.

Fix Text (F-62875r1_fix)
Set and lock the following preferences using the “Mozilla.cfg” file: “services.sync.autoconnect”, set to “false”; “services.sync.engine.addons”, set to “false”; “services.sync.engine.bookmarks”, set to “false”; “services.sync.engine.history”, set to “false”; “services.sync.engine.passwords”, set to “false”; “services.sync.engine.prefs”, set to “false”; “services.sync.engine.tabs”, set to “false”.