Update DisabledCiphers policy

[policy-templates.git] / mac / org.mozilla.firefox.plist

diff --git a/mac/org.mozilla.firefox.plist b/mac/org.mozilla.firefox.plist
index 3aa4b0f4dd9ddbc6ac4cce69b8dae5c061520cfe..267a7c967ef7ae91ead23fe5dc04a732772c144f 100644 (file)
--- a/mac/org.mozilla.firefox.plist
+++ b/mac/org.mozilla.firefox.plist
@@ -39,6 +39,8 @@
                        <key>NTLM</key>
                        <true/>
                </dict>
+               <key>PrivateBrowsing</key>
+               <true/>
                <key>Locked</key>
                <true/>
        </dict>
@@ -131,6 +133,31 @@
        <true/>
        <key>DisableBuiltinPDFViewer</key>
        <true/>
+       <key>DisabledCiphers</key>
+       <dict>
+               <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
+               <true/>
+               <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
+               <true/>
+               <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
+               <true/>
+               <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
+               <true/>
+               <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
+               <true/>
+               <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
+               <true/>
+               <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
+               <true/>
+               <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
+               <true/>
+               <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
+               <true/>
+               <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
+               <false/>
+               <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
+               <false/>
+       </dict>
        <key>DisableDeveloperTools</key>
        <true/>
        <key>DisableFeedbackCommands</key>
@@ -191,6 +218,13 @@
                        <string>https://example.com</string>
                </array>
        </dict>
+       <key>EncryptedMediaExtensions</key>
+               <dict>
+               <key>Enabled</key>
+               <false/>
+               <key>Locked</key>
+               <false/>
+       </dict>
        <key>Extensions</key>
        <dict>
                <key>Install</key>
@@ -289,6 +323,8 @@
                <string>http://example.org</string>
                <string>http://example.edu</string>
        </array>
+       <key>MasterPassword</key>
+       <true/>
        <key>NetworkPrediction</key>
        <false/>
        <key>NewTabPage</key>
@@ -305,6 +341,13 @@
        <string></string>
        <key>PasswordManagerEnabled</key>
        <false/>
+       <key>PDFjs</key>
+               <dict>
+               <key>Enabled</key>
+               <false/>
+               <key>EnablePermissions</key>
+               <false/>
+       </dict>
        <key>Permissions</key>
        <dict>
                <key>Camera</key>
@@ -383,6 +426,8 @@
                        <true/>
                </dict>
        </dict>
+       <key>PictureInPicture</key>
+       <true/> | <false/>
        <key>PopupBlocking</key>
        <dict>
                <key>Allow</key>