Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

restrict access to chrome extensions

Is there any way to restrict access to chrome extensions page like the picture below? http://s6.picofile.com/file/8184311976/2015_04_03_163820.jpg

A chrome extension to prevent users to install or uninstall and deactive other extensions without having correct password.

like image 644
sun1987 Avatar asked Apr 23 '15 08:04

sun1987


1 Answers

Extensions cannot touch any WebUI (chrome://) pages for security reasons.

Chrome devs work hard to prevent any extension from being hard to uninstall; your idea specifically goes against this and will fail.

Moreover, if an "Installed by a third party" extension is removed, it's blacklisted and will not install automatically again.


If you need to do this for one particular machine, you can enable the "Extensions on chrome:// URLs" flag at chrome://flags/#extensions-on-chrome-urls that bypasses this restriction, and formally allows you to modify that page.

This requires manual intervention to enable, and there are many, many ways to bypass this block for a knowledgeable user (uncluding overriding this flag), so at most it's a "child lock"/experiment. It's also a security risk, since it enables it for all extensions.


The only real way to protect an extension from being uninstalled or disabled is an enterprise policy. ExtensionInstallForceList allows to add extensions that cannot be disabled or removed.

Since it's a possible vector for malware, on Windows it can only be configured in Group Policy for machines connected to a domain.

like image 159
Xan Avatar answered Sep 30 '22 21:09

Xan