From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Fri, 29 May 2020 21:43:45 +0000 (-0500) Subject: EncryptedMediaExtensions policy X-Git-Tag: v1.17~4^2 X-Git-Url: https://git.p6c8.net/policy-templates.git/commitdiff_plain/697516d511c39940a6482f39e6b0d082cf872239?ds=inline;hp=-c EncryptedMediaExtensions policy --- 697516d511c39940a6482f39e6b0d082cf872239 diff --git a/README.md b/README.md index 542840e..e8f1148 100644 --- a/README.md +++ b/README.md @@ -49,6 +49,7 @@ Policies can be specified using the [Group Policy templates on Windows](https:// | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory. | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory. | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection. +| **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it. | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS. | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions. | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions. @@ -2024,6 +2025,54 @@ Value (string): } } ``` +### EncryptedMediaExtensions +Enable or disable Encrypted Media Extensions and optionally lock it. + +If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them. + +If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them. + +**Compatibility:** Firefox 77, Firefox ESR 68.9\ +**CCK2 Equivalent:** N/A\ +**Preferences Affected:** `media.eme.enabled` + +#### Windows (GPO) +``` +Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0 +Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0 +``` +#### Windows (Intune) +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked +``` +Value (string): +``` +or +``` +#### macOS +``` + + EncryptedMediaExtensions + + Enabled + | + + | + + +``` +#### policies.json +``` +{ + "policies": { + "EncryptedMediaExtensions": { + "Enabled": [true, false], + "Locked": [true, false] + } +} +``` ### EnterprisePoliciesEnabled Enable policy support on macOS. @@ -3307,7 +3356,7 @@ Set and lock certain preferences. |     If false, the geolocation API is disabled. | Language dependent | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2 |     If set, preferred language for web pages. -| media.eme.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true +| media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true |     If false, Encrypted Media Extensions are not enabled. | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true |     If false, the OpenH264 plugin is not downloaded. diff --git a/mac/org.mozilla.firefox.plist b/mac/org.mozilla.firefox.plist index 0f0baae..aa7f05a 100644 --- a/mac/org.mozilla.firefox.plist +++ b/mac/org.mozilla.firefox.plist @@ -214,6 +214,13 @@ https://example.com + EncryptedMediaExtensions + + Enabled + + + + Extensions Install diff --git a/windows/de-DE/firefox.adml b/windows/de-DE/firefox.adml index 14685e3..8fa7042 100644 --- a/windows/de-DE/firefox.adml +++ b/windows/de-DE/firefox.adml @@ -25,7 +25,9 @@ Firefox 75 oder höher, Firefox 68.7 ESR oder höher Firefox 75 oder höher Firefox 76 oder höher, Firefox 68.8 ESR oder höher + Firefox 76 oder höher Firefox 77 oder höher, Firefox 68.9 ESR oder höher + Firefox 77 oder höher Firefox 78 oder höher Firefox Berechtigungen @@ -47,6 +49,7 @@ Einstellungen Benutzer-Benachrichtigungen Disabled Ciphers + Encrypted Media Extensions Erlaubte Seiten Gesperrte Seiten Automatisches Update @@ -763,6 +766,14 @@ If this policy is enabled or not configured, the TLS_RSA_WITH_AES_256_CBC_SHA Ci Wenn diese Richtlinieneinstellung deaktiviert ist, ist der TLS_RSA_WITH_3DES_EDE_CBC_SHA Cipher deaktiviert. If this policy is enabled or not configured, the TLS_RSA_WITH_3DES_EDE_CBC_SHA Cipher aktiviert. + Enable Encrypted Media Extensions + If this policy is disabled, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them. + +If this policy is enabled or not configured, encrypted media extensions (like Widevine) are downloaded automatically and used by Firefox. + Lock Encrypted Media Extensions + If this policy is enabled and EncryptedMediaExtensions are disabled, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them. + +If this policy is not disabled or not configured, it has no effect. Wenn diese Richtlinieneinstellung aktiviert ist, ist die Einstellung auf true gesperrt. Wenn diese Richtlinieneinstellung deaktiviert ist, ist die Einstellung auf false gesperrt. Für eine Beschreibung der Einstellung, siehe: @@ -815,7 +826,7 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferences (E geo.enabled extensions.getAddons.showPane intl.accept_languages - media.eme.enabled + media.eme.enabled (Veraltet) media.gmp-gmpopenh264.enabled media.gmp-widevinecdm.enabled network.dns.disableIPv6 diff --git a/windows/en-US/firefox.adml b/windows/en-US/firefox.adml index ab8e726..26b31c4 100644 --- a/windows/en-US/firefox.adml +++ b/windows/en-US/firefox.adml @@ -25,7 +25,9 @@ Firefox 75 or later, Firefox 68.7 ESR or later Firefox 75 or later Firefox 76 or later, Firefox 68.8 ESR or later + Firefox 76 or later Firefox 77 or later, Firefox 68.9 ESR or later + Firefox 77 or later Firefox 78 or later Firefox Permissions @@ -47,6 +49,7 @@ Preferences User Messaging Disabled Ciphers + Encrypted Media Extensions Allowed Sites Blocked Sites Application Autoupdate @@ -765,6 +768,14 @@ If this policy is enabled or not configured, the TLS_RSA_WITH_AES_256_CBC_SHA ci If this policy is disabled, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is disabled. If this policy is enabled or not configured, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is enabled. + Enable Encrypted Media Extensions + If this policy is disabled, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them. + +If this policy is enabled or not configured, encrypted media extensions (like Widevine) are downloaded automatically and used by Firefox. + Lock Encrypted Media Extensions + If this policy is enabled and EncryptedMediaExtensions are disabled, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them. + +If this policy is not disabled or not configured, it has no effect. If this policy is enabled, the preference is locked to true. If this policy is disabled, the preference is locked to false. For a description of the preference, see: @@ -816,7 +827,7 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferences.geo.enabled extensions.getAddons.showPane intl.accept_languages - media.eme.enabled + media.eme.enabled (Deprecated) media.gmp-gmpopenh264.enabled media.gmp-widevinecdm.enabled network.dns.disableIPv6 diff --git a/windows/es-ES/firefox.adml b/windows/es-ES/firefox.adml index a847f7e..6be7969 100644 --- a/windows/es-ES/firefox.adml +++ b/windows/es-ES/firefox.adml @@ -25,7 +25,9 @@ Firefox 75 o posterior, Firefox 68.7 ESR o posterior Firefox 75 o posterior Firefox 76 o posterior, Firefox 68.8 ESR o posterior + Firefox 76 o posterior Firefox 77 o posterior, Firefox 68.9 ESR o posterior + Firefox 77 o posterior Firefox 78 o posterior Firefox Permisos @@ -47,6 +49,7 @@ Preferencias User Messaging Disabled Ciphers + Encrypted Media Extensions Sitios permitidos Sitios bloqueados Application Autoupdate @@ -765,6 +768,14 @@ If this policy is enabled or not configured, the TLS_RSA_WITH_AES_256_CBC_SHA ci If this policy is disabled, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is disabled. If this policy is enabled or not configured, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is enabled. + Enable Encrypted Media Extensions + If this policy is disabled, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them. + +If this policy is enabled or not configured, encrypted media extensions (like Widevine) are downloaded automatically and used by Firefox. + Lock Encrypted Media Extensions + If this policy is enabled and EncryptedMediaExtensions are disabled, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them. + +If this policy is not disabled or not configured, it has no effect. Si esta política está habilitada, la preferencia se bloquea en true. Si esta política está deshabilitada, la preferencia está bloqueada en false. Para una descripción de la preferencia, visite: @@ -816,7 +827,7 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferencesgeo.enabled extensions.getAddons.showPane intl.accept_languages - media.eme.enabled + media.eme.enabled (obsoleto) media.gmp-gmpopenh264.enabled media.gmp-widevinecdm.enabled network.dns.disableIPv6 diff --git a/windows/firefox.admx b/windows/firefox.admx index d5be169..7ae6e26 100644 --- a/windows/firefox.admx +++ b/windows/firefox.admx @@ -27,7 +27,9 @@ + + @@ -101,6 +103,9 @@ + + + @@ -3534,5 +3539,25 @@ + + + + + + + + + + + + + + + + + + + + diff --git a/windows/fr-FR/firefox.adml b/windows/fr-FR/firefox.adml index 6de1ba7..5e697ba 100644 --- a/windows/fr-FR/firefox.adml +++ b/windows/fr-FR/firefox.adml @@ -25,7 +25,9 @@ Firefox 75 ou supérieur, Firefox 68.7 ESR ou supérieur Firefox 75 ou supérieur Firefox 76 ou supérieur, Firefox 68.8 ESR ou supérieur + Firefox 76 ou supérieur Firefox 77 ou supérieur, Firefox 68.9 ESR ou supérieur + Firefox 77 ou supérieur Firefox 78 ou supérieur Firefox Permissions @@ -47,6 +49,7 @@ Préférences User Messaging Disabled Ciphers + Encrypted Media Extensions Sites autorisés Sites bloqués Application Autoupdate @@ -764,6 +767,14 @@ Si cette stratégie est activée ou non configurée, le chiffrement TLS_RSA_WITH Si cette stratégie est désactivée, le chiffrement TLS_RSA_WITH_3DES_EDE_CBC_SHA est désactivé. Si cette stratégie est activée ou non configurée, le chiffrement TLS_RSA_WITH_3DES_EDE_CBC_SHA est activé. + Enable Encrypted Media Extensions + If this policy is disabled, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them. + +If this policy is enabled or not configured, encrypted media extensions (like Widevine) are downloaded automatically and used by Firefox. + Lock Encrypted Media Extensions + If this policy is enabled and EncryptedMediaExtensions are disabled, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them. + +If this policy is not disabled or not configured, it has no effect. Si cette stratégie est activée, la préférence est verrouillée sur true. Si cette stratégie est désactivée, la préférence est verrouillée sur false. Pour une description de la préférence, voir: @@ -815,7 +826,7 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferencesgeo.enabled extensions.getAddons.showPane intl.accept_languages - media.eme.enabled + media.eme.enabled (obsolète) media.gmp-gmpopenh264.enabled media.gmp-widevinecdm.enabled network.dns.disableIPv6 diff --git a/windows/it-IT/firefox.adml b/windows/it-IT/firefox.adml index d4ead90..81e03d2 100644 --- a/windows/it-IT/firefox.adml +++ b/windows/it-IT/firefox.adml @@ -25,7 +25,9 @@ Firefox 75 o versione successiva, Firefox 68.7 ESR o versione successiva Firefox 75 o versione successiva Firefox 76 o versione successiva, Firefox 68.8 ESR o versione successiva + Firefox 76 o versione successiva Firefox 77 o versione successiva, Firefox 68.9 ESR o versione successiva + Firefox 77 o versione successiva Firefox 78 o versione successiva Firefox Permessi @@ -47,6 +49,7 @@ Preferenze Messaggi utente Cifrari disabilitati + Encrypted Media Extensions Siti consentiti Siti bloccati Aggiornamento automatico applicazione @@ -765,6 +768,14 @@ Se questo criterio è abilitato o non configurato, il cifrario TLS_RSA_WITH_AES_ Se questo criterio è disabilitato, il cifrario TLS_RSA_WITH_3DES_EDE_CBC_SHA è disabilitato. Se questo criterio è abilitato o non configurato, il cifrario TLS_RSA_WITH_3DES_EDE_CBC_SHA è abilitato. + Enable Encrypted Media Extensions + If this policy is disabled, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them. + +If this policy is enabled or not configured, encrypted media extensions (like Widevine) are downloaded automatically and used by Firefox. + Lock Encrypted Media Extensions + If this policy is enabled and EncryptedMediaExtensions are disabled, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them. + +If this policy is not disabled or not configured, it has no effect. Se questo criterio è abilitato, la preferenza è impostata a Vero e resa non modificabile. Se questo criterio è disabilitato, la preferenza è impostata a Falso e resa non modificabile. Per una descrizione della preferenza, si veda: @@ -816,7 +827,7 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferencesgeo.enabled extensions.getAddons.showPane intl.accept_languages - media.eme.enabled + media.eme.enabled (deprecata) media.gmp-gmpopenh264.enabled media.gmp-widevinecdm.enabled network.dns.disableIPv6 diff --git a/windows/zh-TW/firefox.adml b/windows/zh-TW/firefox.adml index 3fa8249..39d89e7 100644 --- a/windows/zh-TW/firefox.adml +++ b/windows/zh-TW/firefox.adml @@ -25,7 +25,9 @@ Firefox 75 或更新版本、Firefox 68.7 ESR 或更新版本 Firefox 75 或更新版本 Firefox 76 或更新版本、Firefox 68.8 ESR 或更新版本 + Firefox 76 或更新版本 Firefox 77 或更新版本、Firefox 68.9 ESR 或更新版本 + Firefox 77 或更新版本 Firefox 78 或更新版本 Firefox 權限 @@ -47,6 +49,7 @@ 偏好設定 顯示給使用者的訊息 Disabled Ciphers + Encrypted Media Extensions 允許的網站 封鎖的網站 應用程式自動更新 @@ -763,6 +766,14 @@ If this policy is enabled or not configured, the TLS_RSA_WITH_AES_256_CBC_SHA ci If this policy is disabled, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is disabled. If this policy is enabled or not configured, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is enabled. + Enable Encrypted Media Extensions + If this policy is disabled, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them. + +If this policy is enabled or not configured, encrypted media extensions (like Widevine) are downloaded automatically and used by Firefox. + Lock Encrypted Media Extensions + If this policy is enabled and EncryptedMediaExtensions are disabled, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them. + +If this policy is not disabled or not configured, it has no effect. 若啟用此原則，偏好設定將鎖定為 true。若停用此原則，偏好設定則鎖定為 false。 若需要偏好設定的詳細說明，請參考： @@ -814,7 +825,7 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferences。 geo.enabled extensions.getAddons.showPane intl.accept_languages - media.eme.enabled + media.eme.enabled（已棄用） media.gmp-gmpopenh264.enabled media.gmp-widevinecdm.enabled network.dns.disableIPv6