X-Git-Url: https://git.p6c8.net/policy-templates.git/blobdiff_plain/6149e94c95aa9668659cff243e41946eed1655fa..67d9a1b9f74c0316a21945af7d7ad7bcfc6d2f33:/README.md?ds=sidebyside diff --git a/README.md b/README.md index 7b76f0d..d950794 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,7 @@ +**These policies are in active development and so might contain changes that do not work with current versions of Firefox.** + +**You should use the officially released versions (https://github.com/mozilla/policy-templates/releases) if you are deploying changes.** + Policies can be specified using the Group Policy templates on Windows (https://github.com/mozilla/policy-templates/tree/master/windows), configuration profiles on macOS (https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`. On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution. | Policy Name | Description @@ -42,6 +46,7 @@ Policies can be specified using the Group Policy templates on Windows (https://g | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection. | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS. | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions. +| **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions. | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates. | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed. | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page. @@ -95,7 +100,7 @@ Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com" https://yoursite.com ``` -### JSON +#### JSON ``` { "policies": { @@ -154,7 +159,7 @@ Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0 ``` -### JSON +#### JSON ``` { "policies": { @@ -314,7 +319,7 @@ Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName" ``` -### JSON +#### JSON ``` { "policies": { @@ -1361,8 +1366,9 @@ The configuration for each extension is another dictionary that can contain the **Preferences Affected:** N/A #### Windows - -Software\Policies\Mozilla\Firefox\ExtensionSettings = '{"*": {"installation_mode": "blocked"}}` +``` +Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) = '{"*": {"installation_mode": "blocked"}}' +``` #### macOS ``` @@ -2042,32 +2048,56 @@ Set and lock certain preferences. **CCK2 Equivalent:** `preferences`\ **Preferences Affected:** See below -| Preference | Type | Compatibility -| --- | --- | --- -| app.update.auto | boolean | Firefox 68, Firefox 68 ESR -| browser.cache.disk.enable | boolean | Firefox 68, Firefox 68 ESR -| browser.cache.disk.parent_directory | string | Firefox 68, Firefox 68 ESR -| browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox 68 ESR -| browser.search.update | boolean | Firefox 68, Firefox 68 ESR -| browser.tabs.warnOnClose | boolean | Firefox 68, Firefox 68 ESR -| browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox 68 ESR -| browser.urlbar.suggest.history | boolean | Firefox 68, Firefox 68 ESR -| browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox 68 ESR -| datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox 68 ESR -| dom.disable_window_flip | boolean | Firefox 68, Firefox 68 ESR -| dom.disable_window_move_resize | boolean | Firefox 68, Firefox 68 ESR -| dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox 68 ESR -| dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox 68 ESR -| dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox 68 ESR -| extensions.getAddons.showPane | boolean | Firefox 68, Firefox 68 ESR -| media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox 68 ESR -| media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox 68 ESR -| network.dns.disableIPv6 | boolean | Firefox 68, Firefox 68 ESR -| network.IDN_show_punycode | boolean | Firefox 68, Firefox 68 ESR -| places.history.enabled | boolean | Firefox 68, Firefox 68 ESR -| security.default_personal_cert | string | Firefox 68, Firefox 68 ESR -| security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox 68 ESR -| ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox 68 ESR +| Preference | Type | Compatibility | Default +| --- | --- | --- | --- +| app.update.auto | boolean | Firefox 68, Firefox 68 ESR | true +|     If false, Firefox doesn't automatically install update. +| browser.cache.disk.enable | boolean | Firefox 68, Firefox 68 ESR | true +|     If false, don't store cache on the hard drive. +| browser.cache.disk.parent_directory | string | Firefox 68, Firefox 68 ESR | Profile temporary directory +|     If set, changes the location of the disk cache. +| browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox 68 ESR | false +|     If true, single words are sent to DNS, not directly to search. +| browser.search.update | boolean | Firefox 68, Firefox 68 ESR | true +|     If false, updates for search engines are not checked. +| browser.tabs.warnOnClose | boolean | Firefox 68, Firefox 68 ESR | true +|     If false, there is no warning when the browser is closed. +| browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox 68 ESR | true +|     If false, bookmarks aren't suggested when typing in the URL bar. +| browser.urlbar.suggest.history | boolean | Firefox 68, Firefox 68 ESR | true +|     If false, history isn't suggested when typing in the URL bar. +| browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox 68 ESR | true +|     If false, open tabs aren't suggested when typing in the URL bar. +| datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox 68 ESR | false +|     If true, don't show the privacy policy tab on first run. +| dom.disable_window_flip | boolean | Firefox 68, Firefox 68 ESR | true +|     If false, web pages can focus and activate windows. +| dom.disable_window_move_resize | boolean | Firefox 68, Firefox 68 ESR | false +|     If true, web pages can't move or resize windows. +| dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox 68 ESR | true +|     If false, web pages can't override context menus. +| dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox 68 ESR | N/A +|     See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66 +| dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox 68 ESR | N/A +|     See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66 +| extensions.getAddons.showPane | boolean | Firefox 68, Firefox 68 ESR | N/A +|     If false, the Recommendations tab is not displayed in the Add-ons Manager. +| media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox 68 ESR | true +|     If false, the OpenH264 plugin is not downloaded. +| media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox 68 ESR | true +|     If false, the Widevine plugin is not downloaded. +| network.dns.disableIPv6 | boolean | Firefox 68, Firefox 68 ESR | false +|     If true, IPv6 DNS lokoups are disabled. +| network.IDN_show_punycode | boolean | Firefox 68, Firefox 68 ESR | false +|     If true, display the punycode version of internationalized domain names. +| places.history.enabled | boolean | Firefox 68, Firefox 68 ESR | true +|     If false, history is not enabled. +| security.default_personal_cert | string | Firefox 68, Firefox 68 ESR | Ask Every Time +|     If set to Select Automatically, Firefox automatically chooses the default personal certificate. +| security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox 68 ESR | true +|     If false, SSL errors cannot be sent to Mozilla. +| ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox 68 ESR | true +|     If false, the Alt key doesn't show the menubar on Windows. #### Windows ``` Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0 @@ -2201,7 +2231,7 @@ Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0 ``` -### JSON +#### JSON ``` { "policies": { @@ -2398,7 +2428,7 @@ Set the default search engine. This policy is only available on the ESR. **CCK2 Equivalent:** `defaultSearchEngine`\ **Preferences Affected:** N/A -### Windows +#### Windows ``` Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE ``` @@ -2412,7 +2442,7 @@ Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE ``` -### JSON +#### JSON ``` { "policies": { @@ -2430,7 +2460,7 @@ Prevent installing search engines from webpages. **CCK2 Equivalent:** `disableSearchEngineInstall`\ **Preferences Affected:** N/A -### Windows +#### Windows ``` Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0 ``` @@ -2444,7 +2474,7 @@ Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0 ``` -### JSON +#### JSON ``` { "policies": { @@ -2462,7 +2492,7 @@ Hide built-in search engines. This policy is only available on the ESR. **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\ **Preferences Affected:** N/A -### Windows +#### Windows ``` Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE ``` @@ -2478,7 +2508,7 @@ Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE ``` -### JSON +#### JSON ``` { "policies": { @@ -2513,6 +2543,7 @@ Add new search engines (up to five). This policy is only available on the ESR. ` **Preferences Affected:** N/A #### Windows +``` Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1" Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}" Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST" @@ -2521,6 +2552,7 @@ Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example" Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description" Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}" Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}" +``` #### macOS ``` @@ -2551,7 +2583,7 @@ Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={ ``` -### JSON +#### JSON ``` { "policies": { @@ -2580,7 +2612,7 @@ Enable search suggestions. **CCK2 Equivalent:** N/A\ **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled` -### Windows +#### Windows ``` Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0 ``` @@ -2591,7 +2623,7 @@ Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0 | ``` -### JSON +#### JSON ``` { "policies": { @@ -2699,7 +2731,7 @@ Add a menuitem to the help menu for specifying support information. ``` Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu" Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support" -Software\Policies\Mozilla\Firefox\SupportMenu\Title = "S" +Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S" ``` #### macOS ``` @@ -2715,7 +2747,7 @@ Software\Policies\Mozilla\Firefox\SupportMenu\Title = "S" ``` -### JSON +#### JSON ``` { "policies": { @@ -2756,7 +2788,7 @@ Software\Policies\Mozilla\Firefox\WebsiteFilters\Exceptions\1 = "http://example. ``` -### JSON +#### JSON ``` { "policies": {