diff --git a/config/files/usr/etc/chromium/policies/managed/hardening.json b/config/files/usr/etc/chromium/policies/managed/hardening.json index 3fe4c07..1587998 100644 --- a/config/files/usr/etc/chromium/policies/managed/hardening.json +++ b/config/files/usr/etc/chromium/policies/managed/hardening.json @@ -29,5 +29,18 @@ "WebRtcIPHandling": "disable_non_proxied_udp", "SafeBrowsingExtendedReportingEnabled": false, "BrowserSignin": 0, - "AlternateErrorPagesEnabled": false + "AlternateErrorPagesEnabled": false, + "RemoteAccessHostAllowRemoteAccessConnections": false, + "RemoteAccessHostFirewallTraversal": false, + "DefaultInsecureContentSetting": 2, + "BlockExternalExtensions": true, + "AuthSchemes": "ntlm,negotiate", + "CloudPrintProxyEnabled": false, + "SitePerProcess": true, + "DefaultGeolocationSetting": 2, + "CloudPrintSubmitEnabled": false, + "AutofillAddressEnabled": false, + "AutofillCreditCardEnabled": false, + "ImportSavedPasswords": false, + "DiskCacheSize": 0 } \ No newline at end of file diff --git a/config/files/usr/etc/chromium/policies/managed/hardening.json.readme.md b/config/files/usr/etc/chromium/policies/managed/hardening.json.readme.md index 64cd9ce..31db6c1 100644 --- a/config/files/usr/etc/chromium/policies/managed/hardening.json.readme.md +++ b/config/files/usr/etc/chromium/policies/managed/hardening.json.readme.md @@ -123,3 +123,55 @@ **Disable navigation error correction** `"AlternateErrorPagesEnabled": false` + +**Prevent remote access service from starting** + +`"RemoteAccessHostAllowRemoteAccessConnections": false` + +**Prevent remote client discovery** + +`"RemoteAccessHostFirewallTraversal": false` + +**Do not allow sites to load mixed content** + +`"DefaultInsecureContentSetting": 2` + +**Block external extensions** + +`"BlockExternalExtensions": true` + +**Disable insecure HTTP authentication schemes** + +`"AuthSchemes": "ntlm,negotiate"` + +**Disable Google Cloud Print proxy** + +`"CloudPrintProxyEnabled": false` + +**Prevent disabling site isolation** + +`"SitePerProcess": true` + +**By default, do not allow any site to track the users' physical location** + +`"DefaultGeolocationSetting": 2` + +**Disable Google Cloud Print site submission** + +`"CloudPrintSubmitEnabled": false` + +**Prevent saving address information for autofill** + +`"AutofillAddressEnabled": false` + +**Prevent saving credit card information for autofill** + +`"AutofillCreditCardEnabled": false` + +**Do not import saved passwords on first run** + +`"ImportSavedPasswords": false` + +**Disable disk cache** + +`"DiskCacheSize": 0` \ No newline at end of file