V-252881
CAT IIFirefox must be configured to not delete data upon shutdown.
- Ships Affected
- 1
- Total Findings
- 4
- Open
- 0
- Closed
- 4
Check Text
Type "about:policies" in the browser address bar.
If "SanitizeOnShutdown" is not displayed under Policy Name or the Policy Value does not have {"Cache":false,"Cookies":false,"Downloads":false,"FormData":false,"Sessions":false,"History":false,"OfflineApps":false,"SiteSettings":false,"Locked":true}, this is a finding.
Fix Text
Windows group policy:
1. Open the group policy editor tool with "gpedit.msc".
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Clear data when browser is closed
Policy Name: Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences, Offline Website Data
Policy State: Disabled
Policy Name: Locked
Policy State: Enabled
macOS "plist" file:
Add the following:
<key>SanitizeOnShutdown</key>
<dict>
<key>Cache</key>
<false/>
<key>Cookies</key>
<false/>
<key>Downloads</key>
<false/>
<key>FormData</key>
<false/>
<key>History</key>
<false/>
<key>Sessions</key>
<false/>
<key>SiteSettings</key>
<false/>
<key>OfflineApps</key>
<false/>
<key>Locked</key>
<true/>
</dict>
Linux "policies.json" file:
Add the following in the policies section:
"SanitizeOnShutdown": {
"Cache": false,
"Cookies": false,
"Downloads": false,
"FormData": false,
"History": false,
"Sessions": false,
"SiteSettings": false,
"OfflineApps": false,
"Locked": true
}
STIG Reference
- STIG
- Mozilla Firefox Security Technical Implementation Guide
- Version
- 6
- Release
- 7
- Rule ID
- SV-252881r960963_rule
All Occurrences
This vulnerability appears on 1 ship(s)
| Ship | Hull # | Source File | Status | Assigned To | Scan Date | Actions |
|---|---|---|---|---|---|---|
| USNS MONTFORD POINT | T-ESD-1 | MONT-SW-89134_Firefox_V6R6_20251217-201244.ckl | Unassigned | 2026-03-04T15:25:41.899130 | View in Context | |
| USNS MONTFORD POINT | T-ESD-1 | MONT-SW-89108_Firefox_V6R6_20251217-203042.ckl | Unassigned | 2026-03-04T15:25:15.868210 | View in Context | |
| USNS MONTFORD POINT | T-ESD-1 | _Reviewed/MONT-WS-92010/Checklist/MONT-WS-92010_Firefox_V6R6_20251023-141154.ckl | Unassigned | 2026-01-14T12:57:27.870047 | View in Context | |
| USNS MONTFORD POINT | T-ESD-1 | _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_Firefox_V6R6_20251023-142444.ckl | Unassigned | 2026-01-14T12:57:25.596878 | View in Context |