New Updates for Merge

controls/SV-221558.rb

@@ -41,6 +41,7 @@
   tag nist: ["AC-4"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist } 
     it { should have_property 'RemoteAccessHostFirewallTraversal' }
     its('RemoteAccessHostFirewallTraversal') { should cmp 0 }
   end

controls/SV-221559.rb

@@ -46,6 +46,7 @@
   tag nist: ["SC-18 (1)"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+   it { should exist } 
    it { should have_property 'DefaultGeolocationSetting' }
    its('DefaultGeolocationSetting') { should cmp 2 }
  end

controls/SV-221561.rb

@@ -48,6 +48,7 @@
   tag nist: ["CM-7 a"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist } 
     it { should have_property 'DefaultPopupsSetting' }
     its('DefaultPopupsSetting') { should cmp 2 }
   end

controls/SV-221562.rb

@@ -41,6 +41,7 @@
   tag nist: ["AU-12 a"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallBlocklist') do
+    it { should exist } 
     it { should have_property '1' }
     its('1') { should cmp '*' }
   end

controls/SV-221563.rb

@@ -47,21 +47,21 @@
   tag cci: ["CCI-001170"]
   tag nist: ["SC-18 (4)"]
 
-  # list of approved extension ids determined by administrators to decide which extensions should be allowed for their users
-  approved_ids = input('administrator_approved_extension_ids')
-
   describe.one do
     describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallAllowlist') do
+      it { should exist }
       it { should have_property 'ExtensionInstallAllowlist' }
       its('ExtensionInstallAllowlist') { should cmp 1 }
     end
     describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallAllowlist') do
+      it { should exist }
       it { should have_property 'ExtensionInstallAllowlist' }
       its('ExtensionInstallAllowlist') { should cmp 'oiigbmnaadbkfbmpbfijlflahbdbdgdf' }
     end
     describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallAllowlist') do
+      it { should exist }
       it { should have_property 'ExtensionInstallAllowlist' }
-      its('ExtensionInstallAllowlist') { should cmp approved_ids }
+      its('ExtensionInstallAllowlist') { should cmp input('administrator_approved_extension_ids') }
     end
   end
 end

controls/SV-221564.rb

@@ -42,10 +42,9 @@
   tag cci: ["CCI-000381"]
   tag nist: ["CM-7 a"]
 
-  approved_encrypted_search_provider_name = input('approved_encrypted_search_provider_name')
-
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist } 
     it { should have_property 'DefaultSearchProviderName' }
-    its('DefaultSearchProviderName') { should cmp approved_encrypted_search_provider_name }
+    its('DefaultSearchProviderName') { should cmp input('approved_encrypted_search_provider_name') }
   end
 end

controls/SV-221565.rb

@@ -50,10 +50,9 @@
   tag cci: ["CCI-000381"]
   tag nist: ["CM-7 a"]
 
-  approved_encrytped_search_string = input('approved_encrytped_search_string')
-
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist } 
     it { should have_property 'DefaultSearchProviderSearchURL' }
-    its('DefaultSearchProviderSearchURL') { should cmp approved_encrytped_search_string }
+    its('DefaultSearchProviderSearchURL') { should cmp input('approved_encrytped_search_string') }
   end
 end

controls/SV-221566.rb

@@ -45,6 +45,7 @@
   tag nist: ["CM-7 a"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist } 
     it { should have_property 'DefaultSearchProviderEnabled' }
     its('DefaultSearchProviderEnabled') { should cmp 1 }
   end

controls/SV-221567.rb

@@ -41,6 +41,7 @@
   tag nist: ["CM-7 a"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist } 
     it { should have_property 'PasswordManagerEnabled' }
     its('PasswordManagerEnabled') { should cmp 0 }
   end

controls/SV-221570.rb

@@ -44,6 +44,7 @@
   tag nist: ["SC-18 (3)"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist } 
     it { should have_property 'BackgroundModeEnabled' }
     its('BackgroundModeEnabled') { should cmp 0 }
   end

controls/SV-221571.rb

@@ -40,6 +40,7 @@
   tag nist: ["AC-4 (15)"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist } 
     it { should have_property 'SyncDisabled'}
     its('SyncDisabled') { should cmp 1 }
   end

controls/SV-221572.rb

@@ -45,6 +45,7 @@
   tag nist: ["CM-7 a"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\URLBlocklist') do
+    it { should exist } 
     it { should have_property '1'}
     its('1') { should cmp 'javascript://*' }
   end

controls/SV-221573.rb

@@ -39,6 +39,7 @@
   tag nist: ["AC-4 (15)"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist } 
     it { should have_property 'CloudPrintProxyEnabled'}
     its('CloudPrintProxyEnabled') { should cmp 0 }
   end

controls/SV-221574.rb

@@ -37,7 +37,8 @@
   tag nist: ["CM-6 b"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
-    it { should have_property '\"NetworkPredictionOptions\"'}
-    its('\"NetworkPredictionOptions\"') { should cmp '\"2,\"' }
+    it { should exist }
+    it { should have_property 'NetworkPredictionOptions'}
+    its('NetworkPredictionOptions') { should cmp 2}
   end
 end

controls/SV-221575.rb

@@ -44,6 +44,7 @@
   tag nist: ["CM-7 a"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
     it { should have_property 'MetricsReportingEnabled'}
     its('MetricsReportingEnabled') { should cmp 0 }
   end

controls/SV-221576.rb

@@ -38,6 +38,7 @@
   tag nist: ["CM-7 a"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
     it { should have_property 'SearchSuggestEnabled'}
     its('SearchSuggestEnabled') { should cmp 0 }
   end

controls/SV-221577.rb

@@ -38,6 +38,7 @@
   tag nist: ["CM-7 a"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
     it { should have_property 'ImportSavedPasswords'}
     its('ImportSavedPasswords') { should cmp 0 }
   end

controls/SV-221578.rb

@@ -45,6 +45,7 @@
   tag nist: ["AU-10"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
     it { should have_property 'IncognitoModeAvailability'}
     its('IncognitoModeAvailability') { should cmp 1 }
   end

controls/SV-221579.rb

@@ -38,6 +38,7 @@
   tag nist: ["IA-5 (2) (b) (1)"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
     it { should have_property 'EnableOnlineRevocationChecks'}
     its('EnableOnlineRevocationChecks') { should cmp 1 }
   end

controls/SV-221580.rb

@@ -47,10 +47,12 @@
 
   describe.one do
     describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+      it { should exist }
       it { should have_property 'SafeBrowsingProtectionLevel' }
       its('SafeBrowsingProtectionLevel') { should cmp 1 }
      end
      describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+      it { should exist }
       it { should have_property 'SafeBrowsingProtectionLevel' }
       its('SafeBrowsingProtectionLevel') { should cmp 2 }
      end

controls/SV-221581.rb

@@ -35,6 +35,7 @@
   tag nist: ["SC-28"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
     it { should have_property 'SavingBrowserHistoryDisabled'}
     its('SavingBrowserHistoryDisabled') { should cmp 0 }
   end

controls/SV-221584.rb

@@ -21,4 +21,13 @@
   tag legacy: ["SV-57639","V-44805"]
   tag cci: ["CCI-002605"]
   tag nist: ["SI-2 c"]
-end
+
+  current_chrome_version_command  = <<-EOH
+    (Get-ItemProperty -Path Registry::HKEY_CURRENT_USER\\SOFTWARE\\Google\\Chrome\\BLBeacon -Name version).version
+  EOH
+
+  describe powershell(current_chrome_version_command) do
+    it { should exist }
+    its('stdout') { should cmp >= input('google_chrome_version')  }
+  end
+end

controls/SV-221586.rb

@@ -38,6 +38,7 @@
   tag nist: ["AU-12 a"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
     it { should have_property 'AllowDeletingBrowserHistory'}
     its('AllowDeletingBrowserHistory') { should cmp '0' }
   end

controls/SV-221587.rb

@@ -36,6 +36,7 @@
   tag nist: ["AU-12 a"]
 
   describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
     it { should have_property 'PromptForDownloadLocation'}
     its('PromptForDownloadLocation') { should cmp '1' }
   end

controls/SV-221588.rb

@@ -56,4 +56,24 @@
   tag legacy: ["SV-94635","V-79931"]
   tag cci: ["CCI-000169"]
   tag nist: ["AU-12 a"]
+
+  if input('sensitive_system')
+    impact 0.0
+    describe 'This Control is Not Applicable to systems for Sensitive Networks.' do
+      skip 'This Control is Not Applicable to systems for Sensitive Networks.'
+    end
+  else
+    describe.one do
+        describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+          it { should exist }
+          it { should have_property 'DownloadRestrictions' }
+          its('DownloadRestrictions') { should cmp 1 }
+        end
+        describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+          it { should exist }
+          it { should have_property 'DownloadRestrictions' }
+          its('DownloadRestrictions') { should cmp 2 }
+        end
+     end
+  end
 end

controls/SV-221590.rb

@@ -42,4 +42,10 @@
   tag legacy: ["SV-96299","V-81585"]
   tag cci: ["CCI-001166"]
   tag nist: ["SC-18 (1)"]
+
+  describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
+    it { should have_property 'SafeBrowsingExtendedReportingEnabled'}
+    its('SafeBrowsingExtendedReportingEnabled') { should cmp 0 }
+  end
 end

controls/SV-221591.rb

@@ -38,4 +38,10 @@
   tag legacy: ["SV-96301","V-81587"]
   tag cci: ["CCI-000381"]
   tag nist: ["CM-7 a"]
+
+  describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
+    it { should have_property 'DefaultWebUsbGuardSetting'}
+    its('DefaultWebUsbGuardSetting') { should cmp 2 }
+  end
 end

controls/SV-221592.rb

@@ -38,4 +38,10 @@
   tag legacy: ["SV-96305","V-81591"]
   tag cci: ["CCI-000169"]
   tag nist: ["AU-12 a"]
+
+  describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
+    it { should have_property 'ChromeCleanupEnabled'}
+    its('ChromeCleanupEnabled') { should cmp 0 }
+  end
 end

controls/SV-221593.rb

@@ -48,4 +48,10 @@
   tag legacy: ["SV-96307","V-81593"]
   tag cci: ["CCI-000169"]
   tag nist: ["AU-12 a"]
+
+  describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
+    it { should have_property 'ChromeCleanupReportingEnabled'}
+    its('ChromeCleanupReportingEnabled') { should cmp 0 }
+  end
 end

controls/SV-221594.rb

@@ -35,4 +35,10 @@
   tag legacy: ["SV-96311","V-81597"]
   tag cci: ["CCI-000381"]
   tag nist: ["CM-7 a"]
+
+  describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
+    it { should have_property 'EnableMediaRouter'}
+    its('EnableMediaRouter') { should cmp 0 }
+  end
 end

controls/SV-221595.rb

@@ -37,4 +37,10 @@
   tag legacy: ["SV-96295","V-81581"]
   tag cci: ["CCI-000381"]
   tag nist: ["CM-7 a"]
+
+  describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
+    it { should have_property 'AutoplayAllowed'}
+    its('AutoplayAllowed') { should cmp 0 }
+  end
 end

controls/SV-221596.rb

@@ -40,4 +40,10 @@
   tag legacy: ["SV-96303","V-81589"]
   tag cci: ["CCI-001170"]
   tag nist: ["SC-18 (4)"]
+
+  describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
+    it { should have_property 'AutoplayAllowlist'}
+    its('AutoplayAllowlist') { should cmp input('administrator_approved_urls') }
+  end
 end

controls/SV-221597.rb

@@ -41,4 +41,10 @@
   tag legacy: ["SV-101303","V-91203"]
   tag cci: ["CCI-001166"]
   tag nist: ["SC-18 (1)"]
+
+  describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
+    it { should have_property 'UrlKeyedAnonymizedDataCollectionEnabled'}
+    its('UrlKeyedAnonymizedDataCollectionEnabled') { should cmp 0 }
+  end
 end

controls/SV-221598.rb

@@ -42,4 +42,10 @@
   tag legacy: ["SV-101305","V-91205"]
   tag cci: ["CCI-001166"]
   tag nist: ["SC-18 (1)"]
+
+  describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
+    it { should have_property 'WebRtcEventLogCollectionAllowed'}
+    its('WebRtcEventLogCollectionAllowed') { should cmp 0 }
+  end
 end

controls/SV-221599.rb

@@ -37,4 +37,10 @@
   tag legacy: ["SV-106629","V-97525"]
   tag cci: ["CCI-001312"]
   tag nist: ["SI-11 a"]
+
+  describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
+    it { should have_property 'DeveloperToolsAvailability'}
+    its('DeveloperToolsAvailability') { should cmp 2 }
+  end
 end

controls/SV-226401.rb

@@ -34,4 +34,10 @@
   tag legacy: ["SV-111829","V-102867"]
   tag cci: ["CCI-001166"]
   tag nist: ["SC-18 (1)"]
+
+  describe registry_key('HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome') do
+    it { should exist }
+    it { should have_property 'BrowserGuestModeEnabled'}
+    its('BrowserGuestModeEnabled') { should cmp 0 }
+  end
 end