Extension security - how to disallow extension installation

[Jeff ←]

How can I disallow any extensions from being installed, ever?  Or perhaps require a password to install an extension.  Four or five extensions were installed in Chrome without me initiating any of them.  I would like to prevent any program from installing extensions in the future.

I'm using OS X v10.9

Chrome Version 31.0.1650.63

Thank you,

Jeff

[Antony Sargent]

We don't really have any well-supported way to do this. There is a "--disable-extensions" command line flag that you could try running with, but I'm not sure that we have automated tests for it so it may break from time to time without us noticing. Also some features of chrome are actually implemented as built-in extensions/apps internally (the bookmark manager and webstore are examples), and I can't remember off the top of my head if --disable-extensions affect those or not. 

Another thing you could try doing is changing the "Extensions" directory in your user profile to be read-only, so that new directories can't be created there. Before though that it's possible this would cause chrome and/or whatever 3rd party software you have on your system that initiated these installs to break in strange and hard-to-diagnose ways. 

--
You received this message because you are subscribed to the Google Groups "Chromium-extensions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-extens...@chromium.org.
To post to this group, send email to chromium-...@chromium.org.
Visit this group at http://groups.google.com/a/chromium.org/group/chromium-extensions/.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/bc9dfd9f-6039-4d07-aa92-bc2f4e128bc7%40chromium.org.
For more options, visit https://groups.google.com/a/chromium.org/groups/opt_out.

[Jeffrey Yasskin]

This is the sort of thing that
http://blog.chromium.org/2013/11/protecting-windows-users-from-malicious.html
is intended to help with, but it won't help you since you're on a Mac.
What are the extensions that got installed without your cooperation?
Be sure to include the IDs, which are visible after you turn on
"developer mode".

On Sat, Dec 14, 2013 at 7:06 PM, Jeff ← <jdk...@gmail.com> wrote:

[Jeff ←]

Thanks for the replies so far.  I wish to continue using some of my extensions, so I may try to make my extension directory read only if my problem persists.

As far as the extensions that were installed, unfortunately I didn't record all of them, but I can remember four of them because they all came from the same developer:

Amazon Shopping Assistant by Spigot

pfndaklgolladniicklehhancnlgocpp

Ebay Shopping Assistant by Spigot

hbcennhacfaagdopikcegfcobcadeocj

Slick Savings

mhkaekfpcppmmioggniknbnbdbcigpkk

Domain Error Assistant

icdlfehblmklkikfigmjhbmmpmkmpooj

these are all from daniel.spigot

I looked up the IDs from the Chrome Web Store, so I hope they are the same ones used by the extensions when they are installed, but I didn't really want to install them to double check...

-Jeff