Firefox Configuration Recipe (macOS)
Description
After installing Firefox, some configuration may be desirable, examples may include:
- Block auto updates
- Set home page
- Disable Mozilla First Run Pages
Firefox Documentation
The details of the Fileset are based upon: Firefox Configuration
This is known to work with version 60, upwards. It may work with earlier versions, but testing on placement of files may vary with earlier versions. macOS may alternatively use a Configuration Profile (Firefox 64+, ESR 60.4+)
Ingredients
- FW Admin
- Firefox installer application already as a Fileset
- The provided configuration Fileset:FirefoxConfig.fileset.zip
Directions
- Download the Fileset zip file, expand and drag into FileWave > Filesets
- Two files are present in the Fileset.
- The autoconfig.js file specifies the file to be used for configuration. In this Fileset the name of the file has been set to 'mozilla.cfg':
// Any comment. You must start the file with a comment!
pref("general.config.filename", "mozilla.cfg");
pref("general.config.obscure_value", 0);
- To specify any desired settings, edit the mozilla.cfg file. The provided file is designed to prevent Firefox updates, disable privacy telemetry, disable the first run Mozilla home pages and set the user's homepage:
// Any comment. You must start the file with a comment!
// Disable updater
lockPref("app.update.enabled", false);
lockPref("app.update.auto", false);
lockPref("app.update.mode", 0);
lockPref("app.update.service.enabled", false);
// Set Homepage and stop Mozilla startup pages
lockPref("browser.startup.firstrunSkipsHomepage", false);
pref("browser.startup.homepage","http://www.filewave.com");
lockPref("browser.startup.homepage_override.mstone", "ignore");
// Disable Privacy telemetry
lockPref("datareporting.policy.firstRunURL",);
lockPref("datareporting.healthreport.service.enabled", false);
lockPref("datareporting.healthreport.uploadEnabled", false);
lockPref("datareporting.policy.dataSubmissionEnabled", false);
lockPref("toolkit.telemetry.unified", false);
Preference Overview
Preference types can include: pref, defaultPref, lockPref, amongst others. Details can be found at: https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig
pref
This is used to set a preference that can be overridden by the user, but on next launch of the application it will revert back to the setting within the configuration file
lockPref
A lockPref cannot be overridden by the user
defaultPref
This is used to set a preference that can be overridden by the user. The user's setting will persist until the user resets them, at which point the defaultPref will be used on next launch of the application
Preference Names Navigating to 'about:config' in the Firefox URL bar will list all possible preference names and their values and types. |
Association
When associating, to ensure the configuration is installed with the Application, consider creating a Fileset Group:
Associating the 'Firefox' Fileset Group will ensure both the Application and Configuration are associated to devices.
When there is an update to Firefox, replace the version in the Fileset Group with the latest version after testing.
Profile With macOS
A Configuration Profile may be delivered to macOS for Firefox management:
https://support.mozilla.org/en-US/kb/managing-policies-osx-desktops
The linked plist file, may be imported into the FileWave Profile Editor ('Upload File...') and then edited appropriately.
The key settings to focus on initially are:
- EnterprisePoliciesEnabled
- RequestedLocales
Default values in the template will require editing: EnterprisePoliciesEnabled should be enabled to allow management to take control. RequestedLocales may require editing to meet the specific needs.
The template is preconfigured as:
- de
- en-US
To change from German to British for example:
These settings would enforce management for en-GB and en-US, whilst other English locales, e.g en-CA, en-AU would not be managed. Instead, one locale of 'en' could be set to block all English locales.
Key Values
If EnterprisePoliciesEnabled is not set as true and a correct RequestedLocales is not included, management should not be expected.
If unsure which locale is in use, without management in place the 'about:config' URL may be used to view settings:
To ensure users may not circumvent management by changing the locale, enable 'BlockAboutConfig' (already set as TRUE in the template file)