X-Git-Url: https://git.p6c8.net/policy-templates.git/blobdiff_plain/a204f0ec975d94ded94b2841638d91b9b87857a1..7b1b270a100065e83df08cc5160cd3084cd009a5:/mac/README.md diff --git a/mac/README.md b/mac/README.md index 2e49437..6559cf3 100644 --- a/mac/README.md +++ b/mac/README.md @@ -1,11 +1,13 @@ -**IMPORTANT**: These files are in active development along with the policies in Firefox. To get the policy information that corresponds to a specific release, go to https://github.com/mozilla/policy-templates/releases. - -Starting with Firefox 64 and Firefox ESR 60.4, Firefox supports configuration files on macOS. +**IMPORTANT**: To use enterprise policies on macOS, you must set the `EnterprisePoliciesEnabled` policy. An example plist file with all options is available here: https://github.com/mozilla/policy-templates/blob/master/mac/org.mozilla.firefox.plist +This plist file is NOT a mobileconfig. It is intended to be input to a tool like Apple Configurator, Profile Manager, Jamf Pro or Intune. For my testing, I use https://github.com/timsutton/mcxToProfile. + +In particular, in a mobileconfig, the configuraton must be nested in ```mcx_preference_settings``. + If you want to set specific options from the command line, we also provide flattened shortcuts to any item that is nested in the plist file. For example, this policy: @@ -19,12 +21,12 @@ For example, this policy: } ``` which would be set in the plist file like this: -```plist - Homepage - - URL - http://example.com - +```xml +Homepage + + URL + http://example.com + ``` Correctly writing the nested value with the `defaults` command can be hard, so you can flatten the keys by separating them with `__`, like this: ```bash @@ -34,3 +36,12 @@ Before any command line policies will work, you need to enable policies like thi ```bash sudo defaults write /Library/Preferences/org.mozilla.firefox EnterprisePoliciesEnabled -bool TRUE ``` +If you want to set user specific policies, use ~/Library without sudo: +```bash +defaults write ~/Library/Preferences/org.mozilla.firefox EnterprisePoliciesEnabled -bool TRUE +defaults write ~/Library/Preferences/org.mozilla.firefox Homepage__URL -string "http://example.com" +``` +If you find that Firefox is not using your updates immediately, you can run: +```bash +sudo defaults read /Library/Preferences/org.mozilla.firefox +```