Initial checkin of new policy DisabledCiphers

[policy-templates.git] / mac / org.mozilla.firefox.plist

diff --git a/mac/org.mozilla.firefox.plist b/mac/org.mozilla.firefox.plist
index c331e5fd6009e4664f4291b310d6684aa1009ef8..ec4d852336ae90b74618404662dc91027b798f3a 100644 (file)
--- a/mac/org.mozilla.firefox.plist
+++ b/mac/org.mozilla.firefox.plist
@@ -3,7 +3,9 @@
 <plist version="1.0">
 <dict>
        <key>EnterprisePoliciesEnabled</key>
-       <false/>
+       <true/>
+       <key>AppAutoUpdate</key>
+       <true/>
        <key>AppUpdateURL</key>
        <string>https://www.example.com/update.xml</string>
        <key>Authentication</key>
@@ -120,11 +122,36 @@
                <string>URL_TO_ALTERNATE_PROVIDER</string>
                <key>Locked</key>
                <true/>
+               <key>ExcludedDomains</key>
+               <array>
+                       <string>example.com</string>
+               </array>
        </dict>
        <key>DisableAppUpdate</key>
        <true/>
        <key>DisableBuiltinPDFViewer</key>
        <true/>
+       <key>DisabledCiphers</key>
+       <dict>
+               <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
+               <true/>
+               <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
+               <true/>
+               <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
+               <true/>
+               <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
+               <true/>
+               <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
+               <true/>
+               <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
+               <true/>
+               <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
+               <true/>
+               <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
+               <true/>
+               <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
+               <true/>
+    </dict>
        <key>DisableDeveloperTools</key>
        <true/>
        <key>DisableFeedbackCommands</key>