Add IPProtection policy

[policy-templates.git] / mac / README.md

diff --git a/mac/README.md b/mac/README.md
index eda62857a2b0f8857b179ce87159553101b1072c..6559cf30c7b5398a0e4ca8092a13d281a264d719 100644 (file)
--- a/mac/README.md
+++ b/mac/README.md
@@ -1,11 +1,13 @@
-**IMPORTANT**: These files are in active development along with the policies in Firefox. To get the policy information that corresponds to a specific release, go to https://github.com/mozilla/policy-templates/releases.
-
-Starting with Firefox 64 and Firefox ESR 60.4, Firefox supports configuration files on macOS.
+**IMPORTANT**: To use enterprise policies on macOS, you must set the `EnterprisePoliciesEnabled` policy.
 
 An example plist file with all options is available here:
 
 https://github.com/mozilla/policy-templates/blob/master/mac/org.mozilla.firefox.plist
 
+This plist file is NOT a mobileconfig. It is intended to be input to a tool like Apple Configurator, Profile Manager, Jamf Pro or Intune. For my testing, I use https://github.com/timsutton/mcxToProfile.
+
+In particular, in a mobileconfig, the configuraton must be nested in ```mcx_preference_settings``.
+
 If you want to set specific options from the command line, we also provide flattened shortcuts to any item that is nested in the plist file.
 
 For example, this policy:
@@ -34,3 +36,12 @@ Before any command line policies will work, you need to enable policies like thi
 ```bash
 sudo defaults write /Library/Preferences/org.mozilla.firefox EnterprisePoliciesEnabled -bool TRUE
 ```
+If you want to set user specific policies, use ~/Library without sudo:
+```bash
+defaults write ~/Library/Preferences/org.mozilla.firefox EnterprisePoliciesEnabled -bool TRUE
+defaults write ~/Library/Preferences/org.mozilla.firefox Homepage__URL -string "http://example.com"
+```
+If you find that Firefox is not using your updates immediately, you can run:
+```bash
+sudo defaults read /Library/Preferences/org.mozilla.firefox
+```