Details

Firefox allows users to sync preferences and settings, including saved credentials, to cloud-based servers in order to retrieve them from other computers. This setting determines whether cloud sync in enabled.

Disable cloud sync in order to ensure that personal data and credentials are not compromised.

Solution

Perform the following procedure:

* Open the mozilla.cfg file in the installation directory with a text editor

* Add the following lines to mozilla.cfg:

lockPref(“services.sync.enabled”, false);

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1158

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7a.

Source

• Tenable.com/audits