TweetFollow Us on Twitter

MacEnterprise: Managing FireFox

Volume Number: 24
Issue Number: 12
Column Tag: MacEnterprise

MacEnterprise: Managing FireFox

Configuring FireFox for your organization's environment

By Greg Neagle, MacEnterprise.org

Introduction

Although Safari is an excellent web browser, many organizations need to support Firefox as well for a variety of reasons. One very good reason is that it is a modern browser that runs natively on Windows, Linux, and OS X. If your organization supports multiple platforms, it makes sense to standardize on cross-platform applications like Firefox and Thunderbird when possible.

If you are supporting Firefox as a browser in your organization, you may need to pre-configure it for users in your environment. You may need to set up proxies, define your organization's home page as the default browser home page, and turn off application updates, among other things.

Unfortunately, Firefox does not respond to the Mac OS X administrator's standard bag of tricks for managing it. Workgroup Manager/MCX is of no use here, as the important settings are not stored in the org.mozilla.firefox.plist file in the user's preferences. By default, Firefox pays no attention to the system proxy settings. Even such time-honored tricks as copying in pre-defined preference files can be difficult with Firefox as it stores the user profiles at different paths, generated on the first run of Firefox.

A New Bag of Tricks

To manage Firefox in an enterprise environment, you'll need to learn a new bag of tricks. There are two things to learn:

How Firefox defines its preferences.

Where to define your preferences so Firefox will use them for all users on a given machine.

Firefox Preferences

Firefox is a descendant of the Mozilla browser, which was in turn descended from Netscape. Many of the mechanisms carry over from those browsers, and if you are looking for documentation on the Internet, you might want to broaden your search to those browsers as well.

Firefox uses JavaScript files to define its preferences. There are three JavaScript functions defined by Mozilla/Firefox you might use:

  • pref() - sets the current value of a preference. Useful for preferences you'd like to reset to defaults for each session, but to allow users to change during a session.
  • lockPref() - sets the value of a preference, and locks it so users can't change it. Useful to enforce certain policies.
  • defaultPref() - sets the default value of a preference. If the user has already set a value for this preference, this will have no effect.

What preferences can be set? You can get an idea of the vast array of available preferences by opening a Firefox window, and typing about:config into the URL field. If you are running Firefox 3, you might see a warning:


Ignore the sensationalism and click the "I'll be careful" button. You'll see a long list of available preferences:


Some of these correspond to preferences you can access from the Preferences window in Firefox, and others are hidden preferences. The important thing here is that you can get the preference name, its status, type and value, which you'll need in order to manage the preference.

In theory you can manage any of the preferences you find in about:config, but for this article we'll look at a subset. We'll explore how to manage proxy settings, the default browser check, and application updates. We'll also look at changing the default home page, but that actually uses a different technique, which we'll save for later.

Proxy Settings

To get started with managing the proxy settings, first configure them manually, using the Preferences window in Firefox:


In this example, I'm using an automatic proxy configuration URL, sometimes referred to as a "PAC file". Click OK, and once again, visit about:config. To narrow down what is displayed, type "proxy" in the Filter field:


The values we've set will have a status of "user set", and display in bold:


You can use a similar process to determine the correct names and values for most of the preferences you'd like to manage.

Here are the rest of the preferences we're going to manage for this article:


These control application and extension updates, updating the list of available search providers, and the check to see of Firefox is the default browser at launch. Since we are managing Firefox, we don't want users to be notified of newer versions of the application or extensions, and we don't want the user constantly prompted to set Firefox as the default browser.

Editing the Firebox Bundle

To actually get Firefox to use your desired preferences for all users of a given machine, you'll need to edit some files inside the Firefox.app bundle. You'll need to do the editing as either root (via the command line, perhaps using sudo), or as the owner of the files in the Firefox bundle; typically the admin user that installed Firefox.

Take care when editing. If you use a GUI editor, make sure you save any new or changed files as plain text and that no extra extensions are appended to the end of the filename.

You will start by editing the file /Applications/Firefox.app/Contents/MacOS/greprefs/all.js.

Add the following to the end of this file:

 // MyOrganization additions
pref("general.config.obscure_value", 0);
pref("general.config.filename", "firefox_AA.cfg");

Feel free to change "MyOrganization" to the actual name of your organization. What we're doing here is telling Firefox to read the file named here for additional configuration info. The "general.config.obscure.value" tells Firefox the file will be in plain text; by default it expects the file to be obscured with ROT13 encoding, where 13 is added to the ASCII value of every character. The reasons for this are lost in the mists of antiquity.

Save the /Applications/Firefox.app/Contents/MacOS/greprefs/all.js file. Now create a new file at /Applications/Firefox.app/Contents/MacOS/firefox_AA.cfg with the following contents:

// This file sets some prefs for use at MyOrganization
// and locks down some other prefs.
// set proxy config
pref("network.proxy.autoconfig_url", "http://www.myorg.org/auto.proxy");
pref("network.proxy.type", 2);
// disable application updates
lockPref("app.update.enabled", false);
lockPref("app.update.autoUpdateEnabled", false);
lockPref("extensions.update.enabled", false);
lockPref("extensions.update.autoUpdate", false);
lockPref("browser.search.update", false);
// disable default browser check
pref("browser.shell.checkDefaultBrowser", false);

Again, make sure you save it as a plain text file with the name "firefox_AA.cfg" in the directory "/Applications/Firefox.app/Contents/MacOS/". Double-check your work via the command line:

> cd /Applications/Firefox.app/Contents/MacOS/
> ls -al firefox_AA.cfg 
-rw-rw-r—  1 admin  admin  636 Jul 23 13:22 firefox_AA.cfg
> cat firefox_AA.cfg

That last command (cat firefox_AA.cfg) should return the exact contents you entered when you created the file.

In this example, we used two different commands: pref(), and lockPref(). For the proxy, I wanted the user to be able to modify the proxy if needed, but have it return to our recommended settings on the next launch. For the application updates, I wanted to prevent the user from turning these back on. Your requirements may differ.

With everything saved and double-checked, try launching Firefox. You should find these settings exactly as you specified, and in the case of the update prefs, locked:


Note how the corresponding controls are grayed-out and unavailable.

Default Home Page

One important preference is a little harder to manage: the default home page. You might get a clue of why this is so by looking at the preferences in about:config:


You'll see that the browser.startup.homepage points to another file, instead of just being a normal URL. You can set it to a normal URL, and it usually works, but I've found it unreliable. So instead of setting a preference, we'll edit the contents of browserconfig.properties:

Open /Applications/Firefox.app/Contents/MacOS/browserconfig.properties, delete its entire contents, and replace them with:

browser.startup.homepage=http://homepage.myorg.org
browser.startup.homepage_reset=http://homepage.myorg.org

Of course you want to substitute your own URL for the home page.

Now quit and relaunch Firefox. Unless you've set a custom home page, you'll be taken to the home page you defined. Users have the ability to override this if they want. If you truly wanted to enforce a home page, adding

pref("browser.startup.homepage", "http://homepage.myorg.org");
pref("browser.startup.homepage_reset", "http://homepage.myorg.org");

to /Applications/Firefox.app/Contents/MacOS/firefox_AA.cfg should get the behavior you want, but your users may dislike you.

Now that you've modified the Firefox.app bundle, you'll need to push out these changes to all your machines. I hope you have a software distribution mechanism in your organization!

More Info

Congratulations! You've added a few new tricks to your toolbox. For more information on Mozilla/Firefox preferences and configuration, check out these URLs:

http://kb.mozillazine.org/Firefox_:_FAQs_:_About:config_Entries

http://preferential.mozdev.org/preferences.html

http://developer.mozilla.org/en/Automatic_Mozilla_Configurator/Locked_config_settings


Greg Neagle is a member of the steering committee of the Mac OS X Enterprise Project (macenterprise.org) and is a senior systems engineer at a large animation studio. Greg has been working with the Mac since 1984, and with OS X since its release. He can be reached at gregneagle@mac.com.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

NetShade 6.3.1 - Browse privately using...
NetShade is an anonymous proxy and VPN app+service for Mac. Unblock your Internet through NetShade's high-speed proxy and VPN servers spanning seven countries. NetShade masks your IP address as you... Read more
Dragon Dictate 4.0.7 - Premium voice-rec...
With Dragon Dictate speech recognition software, you can use your voice to create and edit text or interact with your favorite Mac applications. Far more than just speech-to-text, Dragon Dictate lets... Read more
Persecond 1.0.2 - Timelapse video made e...
Persecond is the easy, fun way to create a beautiful timelapse video. Import an image sequence from any camera, trim the length of your video, adjust the speed and playback direction, and you’re done... Read more
GIMP 2.8.14p2 - Powerful, free image edi...
GIMP is a multi-platform photo manipulation tool. GIMP is an acronym for GNU Image Manipulation Program. The GIMP is suitable for a variety of image manipulation tasks, including photo retouching,... Read more
Sandvox 2.10.2 - Easily build eye-catchi...
Sandvox is for Mac users who want to create a professional looking website quickly and easily. With Sandvox, you don't need to be a Web genius to build a stylish, feature-rich, standards-compliant... Read more
LibreOffice 5.0.1.2 - Free, open-source...
LibreOffice is an office suite (word processor, spreadsheet, presentations, drawing tool) compatible with other major office suites. The Document Foundation is coordinating development and... Read more
f.lux 36.1 - Adjusts the color of your d...
f.lux makes the color of your computer's display adapt to the time of day, warm at night and like sunlight during the day. Ever notice how people texting at night have that eerie blue glow? Or wake... Read more
VirtualBox 5.0.2 - x86 virtualization so...
VirtualBox is a family of powerful x86 virtualization products for enterprise as well as home use. Not only is VirtualBox an extremely feature rich, high performance product for enterprise customers... Read more
File Juicer 4.43 - Extract images, video...
File Juicer is a drag-and-drop can opener and data archaeologist. Its specialty is to find and extract images, video, audio, or text from files which are hard to open in other ways. In computer... Read more
Apple MainStage 3.2 - Live performance t...
MainStage 3 makes it easy to bring to the stage all the same instruments and effects that you love in your recording. Everything from the Sound Library and Smart Controls you're familiar with from... Read more

ReBoard: Revolutionary Keyboard (Utilit...
ReBoard: Revolutionary Keyboard 1.0 Device: iOS Universal Category: Utilities Price: $1.99, Version: 1.0 (iTunes) Description: Do everything within the keyboard without switching apps! If you are in WhatsApp, how do you schedule a... | Read more »
Tiny Empire (Games)
Tiny Empire 1.1.3 Device: iOS Universal Category: Games Price: $2.99, Version: 1.1.3 (iTunes) Description: Launch cannonballs and blow tiny orcs into thousands of pieces in this intuitive fantasy-themed puzzle shooter! Embark on an... | Read more »
Astropad Mini (Productivity)
Astropad Mini 1.0 Device: iOS iPhone Category: Productivity Price: $4.99, Version: 1.0 (iTunes) Description: *** 50% off introductory price! ​*** Get the high-end experience of a Wacom tablet at a fraction of the price with Astropad... | Read more »
Emo Chorus (Music)
Emo Chorus 1.0.0 Device: iOS Universal Category: Music Price: $1.99, Version: 1.0.0 (iTunes) Description: Realistic Choir simulator ranging from simple Chorus emulation to full ensemble Choir with 128 members. ### introductory offer... | Read more »
Forest Spirit (Games)
Forest Spirit 1.0.5 Device: iOS Universal Category: Games Price: $2.99, Version: 1.0.5 (iTunes) Description: | Read more »
Ski Safari 2 (Games)
Ski Safari 2 1.0 Device: iOS Universal Category: Games Price: $1.99, Version: 1.0 (iTunes) Description: The world's most fantastical, fun, family-friendly skiing game is back and better than ever! Play as Sven's sister Evana, share... | Read more »
Lara Croft GO (Games)
Lara Croft GO 1.0.47768 Device: iOS Universal Category: Games Price: $4.99, Version: 1.0.47768 (iTunes) Description: Lara Croft GO is a turn based puzzle-adventure set in a long-forgotten world. Explore the ruins of an ancient... | Read more »
Whispering Willows (Games)
Whispering Willows 1.23 Device: iOS Universal Category: Games Price: $4.99, Version: 1.23 (iTunes) Description: **LAUNCH SALE 50% OFF** - Whispering Willows is on sale for 50% off ($4.99) until September 9th. | Read more »
Calvino Noir (Games)
Calvino Noir 1.1 Device: iOS iPhone Category: Games Price: $3.99, Version: 1.1 (iTunes) Description: The film noir stealth game. Calvino Noir is the exploratory, sneaking adventure through the 1930s European criminal underworld.... | Read more »
Angel Sword (Games)
Angel Sword 1.0 Device: iOS Universal Category: Games Price: $6.99, Version: 1.0 (iTunes) Description: Prepare to adventure in the most epic full scale multiplayer 3D RPG for mobile! Experience amazing detailed graphics in full HD.... | Read more »

Price Scanner via MacPrices.net

Big Grips Lift Handle For iPad Air and iPad A...
KEM Ventures, Inc. which pioneered the extra-large, super-protective iPad case market with the introduction of Big Grips Frame and Stand in 2011, is launching Big Grips Lift featuring a new super-... Read more
Samsung Launches Galaxy Tab S2, Its Most Powe...
Samsung Electronics America, Inc. has announced the U.S. release of the Galaxy Tab S2, its thinnest, lightest, ultra-fast tablet. Blending form and function, elegant design and multitasking power,... Read more
Tablet Screen Sizes Expanding as iPad Pro App...
Larger screen sizes are gaining favor as the tablet transforms into a productivity device, with shipments growing 185 percent year-over-year in 2015. According to a new Strategy Analytics’ Tablet... Read more
Today Only: Save US$50 on Adobe Elements 13;...
Keep the memories. lose the distractions. Summer’s winding down and it’s time to turn almost perfect shots into picture perfect memories with Elements 13. And get the power to edit both photos and... Read more
1.4GHz Mac mini on sale for $449, save $50
Best Buy has the 1.4GHz Mac mini on sale for $50 off MSRP on their online store. Choose free shipping or free local store pickup (if available). Price for online orders only, in-store price may vary... Read more
12-inch 1.1GHz Gold MacBook on sale for $1149...
B&H Photo has the 12″ 1.1GHz Gold Retina MacBook on sale for $1149.99 including free shipping plus NY sales tax only. Their price is $150 off MSRP, and it’s the lowest price available for this... Read more
27-inch 3.3GHz 5K iMac on sale for $1849, sav...
Best Buy has the 27″ 3.3GHz 5K iMac on sale for $1849.99. Their price is $150 off MSRP, and it’s the lowest price available for this model. Choose free shipping or free local store pickup (if... Read more
Worldwide Tablet Shipments Expected to Declin...
Does Apple badly need a touchscreen convertible/hybrid laptop MacBook? Yes, judging from a new market forecast from the International Data Corporation (IDC) Worldwide Quarterly Tablet Tracker, which... Read more
Continued PC Shipment Shrinkage Expected Thro...
Worldwide PC shipments are expected to fall by -8.7 percent in 2015 and not stabilize until 2017, according to the latest International Data Corporation (IDC) Worldwide Quarterly PC Tracker data. The... Read more
Imminent iPhone 6s Announcement Leads To 103%...
NextWorth Solutions, with its online and in-store electronics trade-in programs including http://NextWorth.com, reports that it has experienced a 103 percent surge in quoted trade-in values over the... Read more

Jobs Board

*Apple* Music, Business Operations - Apple I...
Changing the world is all in a day039s work at Apple . If you love innovation, here039s your chance to make a career of it. You039ll work hard. But the job comes with Read more
WW *Apple* Retail Online Store: Customer In...
**Job Summary** The Apple Retail - Online Store is seeking an experienced web merchandising analytics professional to join the Customer Insights Team. The Web Read more
Senior Payments Security Manager - *Apple*...
**Job Summary** Apple , Inc. is looking for a highly motivated, innovative and hands-on senior payments security manager to join the Apple Pay security team. You will Read more
Software QA Engineer, *Apple* Pay Security...
**Job Summary** Imagine what you could do here. At Apple , great ideas have a way of becoming great products, services, and customer experiences very quickly. Bring Read more
Business Process Engineer ( *Apple* Online S...
**Job Summary** The Apple Online Support Planning team is looking for an experienced Business Process engineer to lead key business process improvement initiatives Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.