Update DisabledCiphers policy

[policy-templates.git] / mac / org.mozilla.firefox.plist

diff --git a/mac/org.mozilla.firefox.plist b/mac/org.mozilla.firefox.plist
index a0813c1c2c8614462a1ac51511115a79b1e9541b..267a7c967ef7ae91ead23fe5dc04a732772c144f 100644 (file)
--- a/mac/org.mozilla.firefox.plist
+++ b/mac/org.mozilla.firefox.plist
@@ -3,7 +3,7 @@
 <plist version="1.0">
 <dict>
        <key>EnterprisePoliciesEnabled</key>
 <plist version="1.0">
 <dict>
        <key>EnterprisePoliciesEnabled</key>

-       <false/>
+       <true/>

        <key>AppAutoUpdate</key>
        <true/>
        <key>AppUpdateURL</key>
        <key>AppAutoUpdate</key>
        <true/>
        <key>AppUpdateURL</key>


@@ -39,6 +39,8 @@
                        <key>NTLM</key>
                        <true/>
                </dict>
                        <key>NTLM</key>
                        <true/>
                </dict>

+               <key>PrivateBrowsing</key>
+               <true/>

                <key>Locked</key>
                <true/>
        </dict>
                <key>Locked</key>
                <true/>
        </dict>


@@ -131,6 +133,31 @@
        <true/>
        <key>DisableBuiltinPDFViewer</key>
        <true/>
        <true/>
        <key>DisableBuiltinPDFViewer</key>
        <true/>

+       <key>DisabledCiphers</key>
+       <dict>
+               <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
+               <true/>
+               <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
+               <true/>
+               <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
+               <true/>
+               <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
+               <true/>
+               <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
+               <true/>
+               <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
+               <true/>
+               <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
+               <true/>
+               <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
+               <true/>
+               <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
+               <true/>
+               <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
+               <false/>
+               <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
+               <false/>
+       </dict>

        <key>DisableDeveloperTools</key>
        <true/>
        <key>DisableFeedbackCommands</key>
        <key>DisableDeveloperTools</key>
        <true/>
        <key>DisableFeedbackCommands</key>


@@ -191,6 +218,13 @@
                        <string>https://example.com</string>
                </array>
        </dict>
                        <string>https://example.com</string>
                </array>
        </dict>

+       <key>EncryptedMediaExtensions</key>
+               <dict>
+               <key>Enabled</key>
+               <false/>
+               <key>Locked</key>
+               <false/>
+       </dict>

        <key>Extensions</key>
        <dict>
                <key>Install</key>
        <key>Extensions</key>
        <dict>
                <key>Install</key>


@@ -289,6 +323,8 @@
                <string>http://example.org</string>
                <string>http://example.edu</string>
        </array>
                <string>http://example.org</string>
                <string>http://example.edu</string>
        </array>

+       <key>MasterPassword</key>
+       <true/>

        <key>NetworkPrediction</key>
        <false/>
        <key>NewTabPage</key>
        <key>NetworkPrediction</key>
        <false/>
        <key>NewTabPage</key>


@@ -305,6 +341,13 @@
        <string></string>
        <key>PasswordManagerEnabled</key>
        <false/>
        <string></string>
        <key>PasswordManagerEnabled</key>
        <false/>

+       <key>PDFjs</key>
+               <dict>
+               <key>Enabled</key>
+               <false/>
+               <key>EnablePermissions</key>
+               <false/>
+       </dict>

        <key>Permissions</key>
        <dict>
                <key>Camera</key>
        <key>Permissions</key>
        <dict>
                <key>Camera</key>


@@ -377,8 +420,14 @@
                        <array>
                                <string>https://example.edu</string>
                        </array>
                        <array>
                                <string>https://example.edu</string>
                        </array>

+                       <key>Default</key>
+                               <string>block-audio</string>
+                       <key>Locked</key>
+                       <true/>

                </dict>
        </dict>
                </dict>
        </dict>

+       <key>PictureInPicture</key>
+       <true/> | <false/>

        <key>PopupBlocking</key>
        <dict>
                <key>Allow</key>
        <key>PopupBlocking</key>
        <dict>
                <key>Allow</key>