Details
Allows you to set whether websites are allowed to get access to connected USB devices. Access can be completely blocked, or the user can be asked every time a website wants to get access to connected USB devices.
If this policy is left not set, ‘3’ will be used, and the user will be able to change it.
2 = Do not allow any site to request access to USB devices via the WebUSB API
3 = Allow sites to ask the user to grant access to a connected USB device
Solution
Windows group policy:
1. Open the ‘group policy editor’ tool with gpedit.msc
2. Navigate to Policy Path: Computer ConfigurationAdministrative TemplatesGoogleGoogle ChromeContent Settings
Policy Name: Control use of the WebUSB API
Policy State: Enabled
Policy Value: 2
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.
References
- 800-53|CM-7a.
- CAT|II
- CCI|CCI-000381
- Rule-ID|SV-221591r615937_rule
- STIG-ID|DTBC-0058
- STIG-Legacy|SV-96301
- STIG-Legacy|V-81587
- Vuln-ID|V-221591