Detections
Analytics

2.36 (L1) Ensure 'Enable security warnings for command-line flags' is set to 'Enabled'

Information

This setting prevents Google Chrome from showing security warnings that potentially dangerous command-line flags are in use at its launch.

The recommended state of this setting is: Enabled (1)

If Google Chrome is being launched with potentially dangerous flags, this information should be exposed to the user as a warning. If not, the user may be unintentionally using non-secure settings and be exposed to security flaws.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to Enabled :

Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Enable security warnings for command-line flags

Impact:

None - This is the default behavior.

See Also

https://workbench.cisecurity.org/benchmarks/23110

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4, CSCv7|7.2

Plugin: Windows

Control ID: 5d8fc01be54075d09152dc62a14c9d2537e0c125ebdba54442829ecfe11baabe