SV-223173r612236: Cryptomining protection must be enabled. | Mozilla Firefox Security Technical Implementation Guide

Loading benchmark…

Assessment Title

Rule Text

Cryptomining protection must be enabled.

Description

Discussion Text

The Content Blocking/Tracking Protection feature stops Firefox from loading content from malicious sites. The content might be a script or an image, for example. If a site is on one of the tracker lists you set Firefox to use, then the fingerprinting script (or other tracking script/image) will not be loaded from that site. Cryptomining scripts use your computer’s central processing unit (CPU) to invisibly mine cryptocurrency.

How this relates to the STIG checklist: STIG vs SCAP benchmark.

IA Controls

NIST SP 800-53

Not mappedCCI-000381SV-111843V-102881

References

DPMS Target Mozilla Firefox DISA DPMS Target Mozilla Firefox 4097

SCC Automation Reference

The reconstructed evaluation script behind this rule's OVAL check(s) — every module a compound check combines, with this rule's own concrete values and DISA's SCC tool's real per-module mechanism curated from static teardown of SCC releases.

Assessment Script Powered by AISandbox-executed

A standalone Shell script to assess this control automatically. Review before running it in your environment.

Syntax-checked and actually executed in an isolated sandbox (not the real system this checks) — confirmed to run without errors.

#!/bin/sh
# OVAL Definition: oval:mil.disa.stig.mozilla.firefox.rhel:def:340
if [ ! -x "$(command -v firefox)" ]; then echo "FAIL"; exit 1; fi
if ! grep -q "^//.*" ~/.mozilla/firefox/*.default/prefs.js; then echo "FAIL"; exit 1; fi
if ! grep -q "pref(\"privacy.trackingprotection.cryptomining.enabled\", true);" ~/.mozilla/firefox/*.default/user.js; then echo "FAIL"; exit 1; fi
echo "PASS"; exit 0

Remediation

Ensure the preference “privacy.trackingprotection.cryptomining.enabled" is set and locked to the value of “true”.