X-Git-Url: https://git.p6c8.net/policy-templates.git/blobdiff_plain/24867a1c60ea9aafc47a840f8456def456966980..5bc4133ba9b7a2ff0edb7a72e8239b0e1f88d72b:/README.md diff --git a/README.md b/README.md index 8119e39..7488715 100644 --- a/README.md +++ b/README.md @@ -38,7 +38,8 @@ Policies can be specified using the Group Policy templates on Windows (https://g | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update. | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar. -| **[`DisplayMenuBar`](#displaymenubar)** | Set the initial state of the menubar. +| **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar. +| **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar. | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS. | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup. | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory. @@ -537,7 +538,7 @@ Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0 "Allow": ["http://example.org/"], "Block": ["http://example.edu/"], "Default": true | false, - "AcceptThirdParty": "always" | "never" | "from-visited"], + "AcceptThirdParty": "always" | "never" | "from-visited", "ExpireAtSessionEnd": true | false, "RejectTracker": true | false, "Locked": true | false @@ -1112,7 +1113,7 @@ Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0 } } ``` -### DisplayMenuBar +### DisplayMenuBar (Deprecated) Set the initial state of the menubar. A user can still hide it and it will stay hidden. **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\ @@ -1138,6 +1139,40 @@ Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0 } } ``` +### DisplayMenuBar +Set the state of the menubar. + +`always` means the menubar is shown and cannot be hidden. + +`never` means the menubar is hidden and cannot be shown. + +`default-on` means the menubar is on by default but can be hidden. + +`default-off` means the menubar is off by default but can be shown. + +**Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\ +**CCK2 Equivalent:** `displayMenuBar`\ +**Preferences Affected:** N/A + +#### Windows (GPO) +``` +Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off" +``` +#### macOS +``` + + DisplayMenuBar + always | never | default-on | default-off + +``` +#### policies.json +``` +{ + "policies": { + "DisplayMenuBar": "always", "never", "default-on", "default-off" + } +} +``` ### DNSOverHTTPS Configure DNS over HTTPS. @@ -1428,7 +1463,8 @@ Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) = "*": { "blocked_install_message": "Custom error message.", "install_sources": ["https://addons.mozilla.org/"], - "installation_mode": "blocked" + "installation_mode": "blocked", + "allowed_types": ["extension"] }, "uBlock0@raymondhill.net": { "installation_mode": "force_installed", @@ -1451,6 +1487,10 @@ Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) = installation_mode blocked + allowed_types + + extension + uBlock0@raymondhill.net @@ -1470,7 +1510,8 @@ Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) = "*": { "blocked_install_message": "Custom error message.", "install_sources": ["https://addons.mozilla.org/"], - "installation_mode": "blocked" + "installation_mode": "blocked", + "allowed_types": ["extension"] }, "uBlock0@raymondhill.net": { "installation_mode": "force_installed", @@ -1993,7 +2034,7 @@ Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0 } ``` ### Permissions -Set permissions associated with camera, microphone, location, and notifications +Set permissions associated with camera, microphone, location, and notifications. Because these are origins, not domains, entries with unique ports must be specified separately. See examples below. `Allow` is a list of origins where the feature is allowed. @@ -2010,6 +2051,7 @@ Set permissions associated with camera, microphone, location, and notifications #### Windows (GPO) ``` Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org" +Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234" Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu" Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0 @@ -2036,6 +2078,7 @@ Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0 Allow https://example.org + https://example.org:1234 Block @@ -2100,7 +2143,7 @@ Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0 "policies": { "Permissions": { "Camera": { - "Allow": ["https://example.org"], + "Allow": ["https://example.org","https://example.org:1234"], "Block": ["https://example.edu"], "BlockNewRequests": true | false, "Locked": true | false @@ -2198,10 +2241,12 @@ Set and lock certain preferences. |     If true, bookmarks are restored to their defaults. | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true |     If false, don't store cache on the hard drive. -| browser.cache.disk.parent_directory | string | Firefox 68, Firefox ESR 68 | Profile temporary directory -|     If set, changes the location of the disk cache. +| ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory +|     ~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on. | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false |     If true, single words are sent to DNS, not directly to search. +| browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent +|     If set, a list of URLs to use as the default top sites on the new tab page. | browser.places.importBookmarksHTML | string | Firefox 70, Firefox ESR 68.2 |     If true, bookmarks are always imported on startup. | browser.safebrowsing.phishing.enabled | string | Firefox 70, Firefox ESR 68.2 | true @@ -2240,16 +2285,23 @@ Set and lock certain preferences. |     If false, the extensions blocklist is not used (Not recommended) | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A |     If false, the Recommendations tab is not displayed in the Add-ons Manager. +| extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true +|     If false, recommendations are not shown on the Extensions tab in the Add-ons Manager. | geo.enabled | string | Firefox 70, Firefox ESR 68.2 | true |     If false, the geolocation API is disabled. | Language dependent | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2 |     If set, preferred language for web pages. -| media.eme.enabled | string | Firefox 70, Firefox ESR 68.2 | true +| media.eme.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true |     If false, Encrypted Media Extensions are not enabled. | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true |     If false, the OpenH264 plugin is not downloaded. | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true |     If false, the Widevine plugin is not downloaded. +| media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true +|     If false, WebRTC is disabled +| media.peerconnection.ice.obfuscate_host_addresses.whitelist | string | Firefox 72, Firefox ESR 68.4 | N/A +|     If set, a list of domains for which mDNS hostname obfuscation is +disabled | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false |     If true, IPv6 DNS lokoups are disabled. | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false @@ -2262,10 +2314,16 @@ Set and lock certain preferences. |     If set to Select Automatically, Firefox automatically chooses the default personal certificate. | security.mixed_content.block_active_content | string | Firefox 70, Firefox ESR 68.2 | true |     If false, mixed active content (HTTP and HTTPS) is not blocked. +| security.osclientcerts.autoload | boolean | Firefox 72, Firefox ESR 68.4 (Windows only) | false +|     If true, client certificates are loaded from the operating system certificate store. | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true |     If false, SSL errors cannot be sent to Mozilla. +| security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true +|     If false, the TLS 1.3 downgrade check is disabled. | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true |     If false, the Alt key doesn't show the menubar on Windows. +| widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A +|     If set, overrides the GTK theme for widgets. #### Windows (GPO) ``` Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0 @@ -2373,7 +2431,7 @@ Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0 Proxy Mode - none | system | manual | autoDetect| autoConfig + none | system | manual | autoDetect | autoConfig Locked | HTTPProxy