Merge pull request #585 from mozilla/DisabledCiphers

[policy-templates.git] / mac / org.mozilla.firefox.plist

diff --git a/mac/org.mozilla.firefox.plist b/mac/org.mozilla.firefox.plist
index 7d67994b189652085c5823291b74e6eb60a282c4..17343d3fb39f34c38141a5fc4c665b0b03548301 100644 (file)
--- a/mac/org.mozilla.firefox.plist
+++ b/mac/org.mozilla.firefox.plist
@@ -3,7 +3,9 @@
 <plist version="1.0">
 <dict>
        <key>EnterprisePoliciesEnabled</key>
-       <false/>
+       <true/>
+       <key>AppAutoUpdate</key>
+       <true/>
        <key>AppUpdateURL</key>
        <string>https://www.example.com/update.xml</string>
        <key>Authentication</key>
@@ -30,6 +32,15 @@
                        <key>NTLM</key>
                        <true/>
                </dict>
+               <key>AllowProxies</key>
+               <dict>
+                       <key>SPNEGO</key>
+                       <true/>
+                       <key>NTLM</key>
+                       <true/>
+               </dict>
+               <key>Locked</key>
+               <true/>
        </dict>
        <key>BlockAboutAddons</key>
        <true/>
@@ -111,11 +122,36 @@
                <string>URL_TO_ALTERNATE_PROVIDER</string>
                <key>Locked</key>
                <true/>
+               <key>ExcludedDomains</key>
+               <array>
+                       <string>example.com</string>
+               </array>
        </dict>
        <key>DisableAppUpdate</key>
        <true/>
        <key>DisableBuiltinPDFViewer</key>
        <true/>
+       <key>DisabledCiphers</key>
+       <dict>
+               <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
+               <true/>
+               <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
+               <true/>
+               <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
+               <true/>
+               <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
+               <true/>
+               <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
+               <true/>
+               <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
+               <true/>
+               <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
+               <true/>
+               <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
+               <true/>
+               <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
+               <true/>
+    </dict>
        <key>DisableDeveloperTools</key>
        <true/>
        <key>DisableFeedbackCommands</key>
@@ -132,6 +168,8 @@
        <true/>
        <key>DisableMasterPasswordCreation</key>
        <true/>
+       <key>DisablePasswordReveal</key>
+       <true/>
        <key>DisablePocket</key>
        <true/>
        <key>DisablePrivateBrowsing</key>
@@ -169,6 +207,10 @@
                <true/>
                <key>Fingerprinting</key>
                <true/>
+               <key>Exceptions</key>
+               <array>
+                       <string>https://example.com</string>
+               </array>
        </dict>
        <key>Extensions</key>
        <dict>
@@ -346,6 +388,21 @@
                        <key>Locked</key>
                        <true/>
                </dict>
+               <key>Autoplay</key>
+               <dict>
+                       <key>Allow</key>
+                       <array>
+                               <string>https://example.org</string>
+                       </array>
+                       <key>Block</key>
+                       <array>
+                               <string>https://example.edu</string>
+                       </array>
+                       <key>Default</key>
+                               <string>block-audio</string>
+                       <key>Locked</key>
+                       <true/>
+               </dict>
        </dict>
        <key>PopupBlocking</key>
        <dict>
@@ -386,6 +443,17 @@
        <true/>
        <key>SearchBar</key>
        <string>separate</string>
+       <key>UserMessaging</key>
+       <dict>
+               <key>WhatsNew</key>
+               <false/>
+               <key>ExtensionRecommendations</key>
+               <false/>
+               <key>FeatureRecommendations</key>
+               <false/>
+               <key>UrlbarInterventions</key>
+               <false/>
+       </dict>
        <key>WebsiteFilter</key>
        <dict>
                <key>Block</key>