SV-251568r960963: Firefox cryptomining protection must be enabled. | Mozilla Firefox for Linux STIG SCAP Benchmark

Loading benchmark…

Assessment Title

Rule Text

Firefox cryptomining protection must be enabled.

Description

Discussion Text

The Content Blocking/Tracking Protection feature stops Firefox from loading content from malicious sites. The content might be a script or an image, for example. If a site is on one of the tracker lists that Firefox is set to use, the fingerprinting script (or other tracking script/image) will not be loaded from that site. Cryptomining scripts use a computer's central processing unit to invisibly mine cryptocurrency.

How this relates to the STIG checklist: STIG vs SCAP benchmark.

IA Controls

NIST SP 800-53

Not mappedCCI-000381

References

DPMS Target Mozilla Firefox 2021 VERSION DISA DPMS Target Mozilla Firefox 2021 VERSION 5446

Checks

DISA STIG (Manual Reference)

Type "about:policies" in the browser address bar. 

If "EnableTrackingProtection" is not displayed under Policy Name or the Policy Value is not "Cryptomining" with a value of "true", this is a finding.

SCC Automation Reference

The reconstructed evaluation script behind this rule's OVAL check(s) — every module a compound check combines, with this rule's own concrete values and DISA's SCC tool's real per-module mechanism curated from static teardown of SCC releases.

#!/bin/bash
# Reconstructed from oval:mil.disa.stig.firefox.linux:def:123
# Firefox cryptomining protection must be enabled.
# Per-module read mechanism curated from static teardown of DISA's SCC tool
# (SCAP Compliance Checker) -- see the SCC Automation Reference above.
#
# MANUAL REVIEW REQUIRED -- the module(s) below could not be reconstructed
# into working code from curated SCC reference data, and are excluded from
# the automated result:
#   - textfilecontent54_object (textfilecontent54_test) -- EnableTrackingProtection Cryptomining set to true: no extractor for field "subexpression"

echo "MANUAL REVIEW REQUIRED -- see notes above; no part of this check could be automated"

Remediation

Windows group policy:
1. Open the group policy editor tool with "gpedit.msc".
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Tracking Protection
Policy Name: Cryptomining
Policy State: Enabled

macOS "plist" file:
Add the following:
<key>EnableTrackingProtection</key>
  <dict>
    <key>Cryptomining</key>
 <true/>
  </dict>

Linux "policies.json" file:
Add the following in the policies section:
"EnableTrackingProtection": {
  "Cryptomining": true
}