documentation_complete: true

title: 'Enable Only Approved Plugins'

description: |-
    An organization might need to use an internal or third party developed plugins. Any
    organizationally approved plugin should be enabled. To enable approved plugins,
    set <tt>EnabledPlugins</tt> to the list of organizationally approved plugins
    in the Chromium policy file.

rationale: |-
    The whitelist should only contain organizationally approved plugins. This is to prevent
    a user from accidently whitelisitng a malicious plugin.

severity: unknown

identifiers:
    cce: ""

references:
    disa: ""
    nist: ""
    stigid: DTBC0035

ocil_clause: 'no plugins exist or it is not set to none'

ocil: |-
    To verify that approved plugins are set, run the following command:
    <pre>$ grep EnabledPlugins /etc/chromium/policies/managed/*.json</pre>
    The output should contain:
    <pre>"EnabledPlugins": ["<tt>approved_plugin1</tt>", "<tt>approved_plugin2</tt>"],</pre>
