improve: add additional chromium hardening policies

config/files/usr/etc/chromium/policies/managed/hardening.json

@@ -29,5 +29,18 @@
 	"WebRtcIPHandling": "disable_non_proxied_udp",
 	"SafeBrowsingExtendedReportingEnabled": false,
 	"BrowserSignin": 0,
-	"AlternateErrorPagesEnabled": false
+	"AlternateErrorPagesEnabled": false,
+	"RemoteAccessHostAllowRemoteAccessConnections": false,
+	"RemoteAccessHostFirewallTraversal": false,
+	"DefaultInsecureContentSetting": 2,
+	"BlockExternalExtensions": true,
+	"AuthSchemes": "ntlm,negotiate",
+	"CloudPrintProxyEnabled": false,
+	"SitePerProcess": true,
+	"DefaultGeolocationSetting": 2,
+	"CloudPrintSubmitEnabled": false,
+	"AutofillAddressEnabled": false,
+	"AutofillCreditCardEnabled": false,
+	"ImportSavedPasswords": false,
+	"DiskCacheSize": 0
 }

config/files/usr/etc/chromium/policies/managed/hardening.json.readme.md

@@ -123,3 +123,55 @@
 **Disable navigation error correction**
 
 `"AlternateErrorPagesEnabled": false`
+
+**Prevent remote access service from starting**
+
+`"RemoteAccessHostAllowRemoteAccessConnections": false`
+
+**Prevent remote client discovery**
+
+`"RemoteAccessHostFirewallTraversal": false`
+
+**Do not allow sites to load mixed content**
+
+`"DefaultInsecureContentSetting": 2`
+
+**Block external extensions**
+
+`"BlockExternalExtensions": true`
+
+**Disable insecure HTTP authentication schemes**
+
+`"AuthSchemes": "ntlm,negotiate"`
+
+**Disable Google Cloud Print proxy**
+
+`"CloudPrintProxyEnabled": false`
+
+**Prevent disabling site isolation**
+
+`"SitePerProcess": true`
+
+**By default, do not allow any site to track the users' physical location**
+
+`"DefaultGeolocationSetting": 2`
+
+**Disable Google Cloud Print site submission**
+
+`"CloudPrintSubmitEnabled": false`
+
+**Prevent saving address information for autofill**
+
+`"AutofillAddressEnabled": false`
+
+**Prevent saving credit card information for autofill**
+
+`"AutofillCreditCardEnabled": false`
+
+**Do not import saved passwords on first run**
+
+`"ImportSavedPasswords": false`
+
+**Disable disk cache**
+
+`"DiskCacheSize": 0`