Restrict CPU core sharing for renderer process

Policy ID
RestrictCoreSharingOnRenderer
Scope
Computer Configuration, User Configuration
Supported on
Microsoft Windows 7 or later
Source
Google Chrome Policy Templates (version 156.0.8078.80)
Category
Google › Google Chrome

Description

This policy mitigates side-channel cross process memory attacks by isolating the renderer process on the CPU core and preventing other processes from sharing the same core. The mitigation is supported on Microsoft® Windows® 11 24H2 and above. If the OS does not have the required scheduling support, this policy will have no effect. This policy may slow down performance in some demanding scenarios similar to disabling hyperthreading. For more information refer https://learn.microsoft.com/en-us/windows/win32/api/winnt/ns-winnt-process_mitigation_side_channel_isolation_policy
If this policy is enabled, all other processes will not be scheduled on the same CPU core when the renderer process is running.
If this policy is disabled, all other processes can be scheduled on the same CPU core if a renderer process is running on it.
If this policy is not set, all other processes can be scheduled on the same CPU core if a renderer process is running on the core. This may vary depending on Google Chrome release, currently running field trials, and platform.

Registry

ComputerHKEY_LOCAL_MACHINE
  • RestrictCoreSharingOnRendererREG_DWORD
UserHKEY_CURRENT_USER
  • RestrictCoreSharingOnRendererREG_DWORD

Other policies in the same category

View all policies in this category (235)