Detections
Analytics
FFOX-00-000004 - Firefox must be configured to not automatically check for updated versions of installed search plugins.
Information
Updates must be controlled and installed from authorized and trusted servers. This setting overrides a number of other settings that may direct the application to access external URLs.Solution
Windows group policy:1. Open the group policy editor tool with 'gpedit.msc'.
2. Navigate to Policy Path: Computer ConfigurationAdministrative TemplatesMozillaFirefox
Policy Name: Preferences
Policy State: Enabled
Policy Value:
{
'browser.search.update': {
'Value': false,
'Status': 'locked'
}
}
macOS 'plist' file:
Add the following:
<key>Preferences</key>
<dict>
<key>browser.search.update</key>
<dict>
<key>Value</key>
<false/>
<key>Status</key>
<string>locked</string>
</dict>
</dict>
Linux 'policies.json' file:
Add the following in the policies section:
'Preferences': {
'browser.search.update': {
'Value': false,
'Status': 'locked'
}
}
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MOZ_Firefox_V6R7_STIG.zip
Item Details
Audit Name: DISA STIG Mozilla Firefox MacOS v6r7
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-251548r1067552_rule, STIG-ID|FFOX-00-000004, Vuln-ID|V-251548
Plugin: Unix
Control ID: f7c407142021a0a6be11d34be3dfa55348a140599e69faa6e4b47423befb0906