Navigate

Check: FFOX-00-000020

Mozilla Firefox STIG: FFOX-00-000020 (in versions v6 r5 through v6 r1)

Title

Firefox search suggestions must be disabled. (Cat II impact)

Discussion

Search suggestions must be disabled as this could lead to searches being conducted that were never intended to be made.

Check Content

Type "about:policies" in the browser window. If "SearchSuggestEnabled" is not displayed under Policy Name or the Policy Value is not "false", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Search Policy Name: Search Suggestions Policy State: Disabled macOS "plist" file: Add the following: <key>SearchSuggestEnabled</key> <false/> Linux "policies.json" file: Add the following in the policies section: "SearchSuggestEnabled": false

Additional Identifiers

Rule ID: SV-251564r879587_rule

Vulnerability ID: V-251564

Group Title: SRG-APP-000141

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000381	The organization configures the information system to provide only essential capabilities.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
CM-7	Least Functionality