Detections
Analytics

2.69 Ensure 'Allow remote debugging' is set to 'Disabled'

Information

This policy setting controls whether users may use remote debugging. This feature allows remote debugging of live content on a Windows 10 or later device from a Windows or macOS computer.

The recommended state for this setting is: Disabled.

Disabling remote debugging enhances security and protects applications from unauthorized access. Some attack tools can exploit this feature to extract information, or to insert malicious code.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Allow remote debugging

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template google.admx/adml that can be downloaded from: Download Chrome Browser for Your Business - Chrome Enterprise https://chromeenterprise.google/browser/download/#manage-policies-tab.

Impact:

Users will not be able access the remote debugging feature in Google Chrome.

See Also

https://workbench.cisecurity.org/benchmarks/23110

Item Details

Category: ACCESS CONTROL, RISK ASSESSMENT, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|AC-17, 800-53|AC-17(1), 800-53|RA-5, 800-53|SC-7, 800-53|SI-4

Plugin: Windows

Control ID: 514041e14bd405446b4ee50d9c4f2d241de06337af5b175e8407d07104a66268