FFOX-00-000004 - Firefox must be configured to not automatically check for updated versions of installed search plugins.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Updates must be controlled and installed from authorized and trusted servers. This setting overrides a number of other settings that may direct the application to access external URLs.

Solution

Windows group policy:
1. Open the group policy editor tool with 'gpedit.msc'.
2. Navigate to Policy Path: Computer ConfigurationAdministrative TemplatesMozillaFirefox
Policy Name: Preferences
Policy State: Enabled
Policy Value:
{
'browser.search.update': {
'Value': false,
'Status': 'locked'
}
}

macOS 'plist' file:
Add the following:
<key>Preferences</key>
<dict>
<key>browser.search.update</key>
<dict>
<key>Value</key>
<false/>
<key>Status</key>
<string>locked</string>
</dict>
</dict>

Linux 'policies.json' file:
Add the following in the policies section:
'Preferences': {
'browser.search.update': {
'Value': false,
'Status': 'locked'
}
}

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MOZ_Firefox_V6R1_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000381, Rule-ID|SV-251548r807116_rule, STIG-ID|FFOX-00-000004, Vuln-ID|V-251548

Plugin: Unix

Control ID: 91b71efa7d7ebc6deb6508001c76a861c6d1b635d9dd77d18b6e0daaccbbbf41