Details

Set permissions on mozilla.cfg so that it can only be modified or deleted by an Administrator.

Any users with the ability to modify the mozilla.cfg file can bypass all security configurations by changing the file or deleting it.

Solution

Deny non-administrators the ability to write to mozilla.cfg.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1158

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-6b.

Source

• Tenable.com/audits