Back

Configure the "Software channel permissions" setting in limited functionality environments properly.


CONTROL ID
04440
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Configure Internet Browser security options according to organizational standards., CC ID: 02166

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • This setting determines the permissions for software channels. For Enterprise Client environments, the Software Channel Permissions setting is Not Configured. For Specialized Security - Limited Functionality environments, this setting should be set to Enabled:High Safety. This setting is applicable … (Pg 115, Microsoft Windows Vista Security Guide Appendix A: Security Group Policy Settings)
  • The "Software channel permissions" machine setting should be configured correctly for the Restricted Sites Zone. Technical Mechanisms: (1) GPO: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone\Software ch… (CCE-9669-3, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The 'Software channel permissions' setting should be configured correctly for the Internet Zone. Technical Mechanisms: (1) GPO: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Software channel permissions (2) R… (CCE-9869-9, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • The "Software channel permissions" machine setting should be configured correctly for the Internet Zone. Technical Mechanisms: (1) GPO Settings: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Software channel p… (CCE-10425-7, Common Configuration Enumeration List, Combined XML: Microsoft Internet Explorer 8, 5.20130214)
  • Disable the Software Channel Permissions setting in a limited functionality environment (oval:gov.nist.fdcc.ie7:def:302, oval:gov.nist.fdcc.ie7:def:290, FDCC Windows IE7 SCAP content using OVAL (fdcc-ie7-oval.xml, fdcc-ie7-patches.xml), Version 5.4)
  • Software channel permissions - Internet Zone - Local Computer (SoftwareChannelPermissions_InternetZone_LocalComputer, NIST SCAP Microsoft Internet Explorer Version 7 (fdcc-ie7-xccdf.xml), FDCC IE7 (1.2) SCAP Content - OVAL 5.4)
  • Software channel permissions - Restricted Sites Zone - Local Computer (SoftwareChannelPermissions_RestrictedSitesZone_LocalComputer, NIST SCAP Microsoft Internet Explorer Version 7 (fdcc-ie7-xccdf.xml), FDCC IE7 (1.2) SCAP Content - OVAL 5.4)
  • This policy setting allows you to manage software channel permissions. If you enable this policy setting, you can choose the following options from the drop-down box. (xccdf_gov.nist_rule_SoftwareChannelPermissions_InternetZone_LocalComputer, oval:gov.nist.USGCB.ie7:def:302, oval:gov.nist.USGCB.ie7:tst:3793, oval:gov.nist.USGCB.ie7:obj:21, oval:gov.nist.USGCB.ie7:ste:3115, USGCB: Guidance for Securing Microsoft Internet Explorer 7, v1.2.3.1)
  • This policy setting allows you to manage software channel permissions. If you enable this policy setting, you can choose the following options from the drop-down box. (xccdf_gov.nist_rule_SoftwareChannelPermissions_RestrictedSitesZone_LocalComputer, oval:gov.nist.USGCB.ie7:def:290, oval:gov.nist.USGCB.ie7:tst:4129, oval:gov.nist.USGCB.ie7:obj:46, oval:gov.nist.USGCB.ie7:ste:3210, USGCB: Guidance for Securing Microsoft Internet Explorer 7, v1.2.3.1)
  • This policy setting allows you to manage software channel permissions. If you enable this policy setting, you can choose the following options from the drop-down box. (xccdf_gov.nist_rule_SoftwareChannelPermissions_InternetZone_LocalComputer, oval:gov.nist.USGCB.ie8:def:31037, oval:gov.nist.USGCB.ie8:tst:31037, oval:gov.nist.USGCB.ie8:obj:31037, oval:gov.nist.USGCB.ie8:ste:31037, USGCB: Guidance for Securing Microsoft Internet Explorer 8, v1.2.3.1)
  • This policy setting allows you to manage software channel permissions. If you enable this policy setting, you can choose the following options from the drop-down box. (xccdf_gov.nist_rule_SoftwareChannelPermissions_RestrictedSitesZone_LocalComputer, oval:gov.nist.USGCB.ie8:def:31078, oval:gov.nist.USGCB.ie8:tst:31078, oval:gov.nist.USGCB.ie8:obj:31078, oval:gov.nist.USGCB.ie8:ste:31078, USGCB: Guidance for Securing Microsoft Internet Explorer 8, v1.2.3.1)