X-Git-Url: https://git.p6c8.net/policy-templates.git/blobdiff_plain/9ee74f76cf4756894a05646c0cbbc0302c630ec6..52055d170818d1d045ebc46b42ff0e278735e229:/README.md diff --git a/README.md b/README.md index 08b406a..386efbc 100644 --- a/README.md +++ b/README.md @@ -1999,7 +1999,7 @@ Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0 } ``` ### Permissions -Set permissions associated with camera, microphone, location, and notifications +Set permissions associated with camera, microphone, location, and notifications. Because these are origins, not domains, entries with unique ports must be specified separately. See examples below. `Allow` is a list of origins where the feature is allowed. @@ -2016,6 +2016,7 @@ Set permissions associated with camera, microphone, location, and notifications #### Windows (GPO) ``` Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org" +Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234" Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu" Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0 @@ -2042,6 +2043,7 @@ Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0 Allow https://example.org + https://example.org:1234 Block @@ -2106,7 +2108,7 @@ Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0 "policies": { "Permissions": { "Camera": { - "Allow": ["https://example.org"], + "Allow": ["https://example.org","https://example.org:1234"], "Block": ["https://example.edu"], "BlockNewRequests": true | false, "Locked": true | false @@ -2204,23 +2206,25 @@ Set and lock certain preferences. |     If true, bookmarks are restored to their defaults. | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true |     If false, don't store cache on the hard drive. -| browser.cache.disk.parent_directory | string | Firefox 68, Firefox ESR 68 | Profile temporary directory -|     If set, changes the location of the disk cache. +| ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory +|     ~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on. | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false |     If true, single words are sent to DNS, not directly to search. -| browser.places.importBookmarksHTML | string | Firefox 70, Firefox ESR 68.2 +| browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent +|     If set, a list of URLs to use as the default top sites on the new tab page. +| browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2 |     If true, bookmarks are always imported on startup. -| browser.safebrowsing.phishing.enabled | string | Firefox 70, Firefox ESR 68.2 | true +| browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true |     If false, phishing protection is not enabled (Not recommended) -| browser.safebrowsing.malware.enabled | string | Firefox 70, Firefox ESR 68.2 | true -|     IF false, malware protection is not enabled (Not recommended) +| browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true +|     If false, malware protection is not enabled (Not recommended) | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true |     If false, updates for search engines are not checked. -| browser.slowStartup.notificationDisabled | string | Firefox 70, Firefox ESR 68.2 | false +| browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false |     If true, a notification isn't shown if startup is slow. | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true |     If false, there is no warning when the browser is closed. -| browser.taskbar.previews.enable | string | Firefox 70, Firefox ESR 68.2 (Windows only) | false +| browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false |     If true, tab previews are shown in the Windows taskbar. | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true |     If false, bookmarks aren't suggested when typing in the URL bar. @@ -2230,7 +2234,7 @@ Set and lock certain preferences. |     If false, open tabs aren't suggested when typing in the URL bar. | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false |     If true, don't show the privacy policy tab on first run. -| dom.allow_scripts_to_close_windows | string | Firefox 70, Firefox ESR 68.2 | false +| dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false |     If false, web page can close windows. | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true |     If false, web pages can focus and activate windows. @@ -2242,11 +2246,13 @@ Set and lock certain preferences. |     See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A |     See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66 -| extensions.blocklist.enabled | string | Firefox 70, Firefox ESR 68.2 | true +| extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true |     If false, the extensions blocklist is not used (Not recommended) | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A |     If false, the Recommendations tab is not displayed in the Add-ons Manager. -| geo.enabled | string | Firefox 70, Firefox ESR 68.2 | true +| extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true +|     If false, recommendations are not shown on the Extensions tab in the Add-ons Manager. +| geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true |     If false, the geolocation API is disabled. | Language dependent | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2 |     If set, preferred language for web pages. @@ -2256,22 +2262,33 @@ Set and lock certain preferences. |     If false, the OpenH264 plugin is not downloaded. | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true |     If false, the Widevine plugin is not downloaded. +| media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true +|     If false, WebRTC is disabled +| media.peerconnection.ice.obfuscate_host_addresses.whitelist | string | Firefox 72, Firefox ESR 68.4 | N/A +|     If set, a list of domains for which mDNS hostname obfuscation is +disabled | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false |     If true, IPv6 DNS lokoups are disabled. | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false |     If true, display the punycode version of internationalized domain names. | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true |     If false, history is not enabled. -| print.save_print_settings | string | Firefox 70, Firefox ESR 68.2 | true +| print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true |     If false, print settings are not saved between jobs. | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time |     If set to Select Automatically, Firefox automatically chooses the default personal certificate. -| security.mixed_content.block_active_content | string | Firefox 70, Firefox ESR 68.2 | true +| security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true |     If false, mixed active content (HTTP and HTTPS) is not blocked. +| security.osclientcerts.autoload | boolean | Firefox 72, Firefox ESR 68.4 (Windows only) | false +|     If true, client certificates are loaded from the operating system certificate store. | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true |     If false, SSL errors cannot be sent to Mozilla. +| security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true +|     If false, the TLS 1.3 downgrade check is disabled. | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true |     If false, the Alt key doesn't show the menubar on Windows. +| widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A +|     If set, overrides the GTK theme for widgets. #### Windows (GPO) ``` Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0