Does any one have any idea on how to create relevance to check the policy settings for Google Chrome running on Mac OSX?
Can you provide documentation on where those policies are set? Examples?
Is this in flat files? Plist? MCX? SQLite db?
Do you already have actionscript that sets a policy you can provide?
These policies are set by a National organization, so I have no idea how it is done. But I know that in Chrome if you go to chrome://policies that will give you a web page with all of the settings. I have found where the data files live on a Mac for chrome, but the files do not seem to contain any “inspectable” data.
Thoughts?
What kind of file is it and where is it located. What is it about the file that means it’s not inspectable ?
According to a website, the settings are stored at the following location
~USERNAME/Library/Application Support/Google/Chrome/User Data/Default/Preferences.
When you go to this location you see a bunch of files, and when you cat them out, it just presents a bunch of unreadable text.
When I get back to the office I will post some of the output of those files.
I see plenty of files in Library/Application Support/Google/Chrome/Default
There’s also a README file that advises these should only be accessed using Google Chrome’s APIs.
So maybe that’s the place to start.
It should be possible to check which chrome policies are set using relevance and use a fixlet/task to configure the chrome policies.
On Windows it is done with Local GPO. See this example: https://bigfix.me/fixlet/details/3747
Configuring chrome policies on Mac is handled differently, but there is documentation from Google about how to do this.
You need to read that documentation in order to figure out how the policies should be applied, which will then give you a clue as to how to write the relevance against those locations to determine which policies are in place and which are missing.
I recommend having a single fixlet/task per policy you want to apply. This allows you to group them together with baselines in different ways for different departments.
From a google document:
Device and OS-user (or platform) policies are pushed to the user using Windows Group Policy Objects (GPO), Managed Preferences on Mac, or another out-of-band management system for Windows/Mac/Linux.