TweetFollow Us on Twitter

MacEnterprise: Managing FireFox

Volume Number: 24
Issue Number: 12
Column Tag: MacEnterprise

MacEnterprise: Managing FireFox

Configuring FireFox for your organization's environment

By Greg Neagle, MacEnterprise.org

Introduction

Although Safari is an excellent web browser, many organizations need to support Firefox as well for a variety of reasons. One very good reason is that it is a modern browser that runs natively on Windows, Linux, and OS X. If your organization supports multiple platforms, it makes sense to standardize on cross-platform applications like Firefox and Thunderbird when possible.

If you are supporting Firefox as a browser in your organization, you may need to pre-configure it for users in your environment. You may need to set up proxies, define your organization's home page as the default browser home page, and turn off application updates, among other things.

Unfortunately, Firefox does not respond to the Mac OS X administrator's standard bag of tricks for managing it. Workgroup Manager/MCX is of no use here, as the important settings are not stored in the org.mozilla.firefox.plist file in the user's preferences. By default, Firefox pays no attention to the system proxy settings. Even such time-honored tricks as copying in pre-defined preference files can be difficult with Firefox as it stores the user profiles at different paths, generated on the first run of Firefox.

A New Bag of Tricks

To manage Firefox in an enterprise environment, you'll need to learn a new bag of tricks. There are two things to learn:

How Firefox defines its preferences.

Where to define your preferences so Firefox will use them for all users on a given machine.

Firefox Preferences

Firefox is a descendant of the Mozilla browser, which was in turn descended from Netscape. Many of the mechanisms carry over from those browsers, and if you are looking for documentation on the Internet, you might want to broaden your search to those browsers as well.

Firefox uses JavaScript files to define its preferences. There are three JavaScript functions defined by Mozilla/Firefox you might use:

  • pref() - sets the current value of a preference. Useful for preferences you'd like to reset to defaults for each session, but to allow users to change during a session.
  • lockPref() - sets the value of a preference, and locks it so users can't change it. Useful to enforce certain policies.
  • defaultPref() - sets the default value of a preference. If the user has already set a value for this preference, this will have no effect.

What preferences can be set? You can get an idea of the vast array of available preferences by opening a Firefox window, and typing about:config into the URL field. If you are running Firefox 3, you might see a warning:


Ignore the sensationalism and click the "I'll be careful" button. You'll see a long list of available preferences:


Some of these correspond to preferences you can access from the Preferences window in Firefox, and others are hidden preferences. The important thing here is that you can get the preference name, its status, type and value, which you'll need in order to manage the preference.

In theory you can manage any of the preferences you find in about:config, but for this article we'll look at a subset. We'll explore how to manage proxy settings, the default browser check, and application updates. We'll also look at changing the default home page, but that actually uses a different technique, which we'll save for later.

Proxy Settings

To get started with managing the proxy settings, first configure them manually, using the Preferences window in Firefox:


In this example, I'm using an automatic proxy configuration URL, sometimes referred to as a "PAC file". Click OK, and once again, visit about:config. To narrow down what is displayed, type "proxy" in the Filter field:


The values we've set will have a status of "user set", and display in bold:


You can use a similar process to determine the correct names and values for most of the preferences you'd like to manage.

Here are the rest of the preferences we're going to manage for this article:


These control application and extension updates, updating the list of available search providers, and the check to see of Firefox is the default browser at launch. Since we are managing Firefox, we don't want users to be notified of newer versions of the application or extensions, and we don't want the user constantly prompted to set Firefox as the default browser.

Editing the Firebox Bundle

To actually get Firefox to use your desired preferences for all users of a given machine, you'll need to edit some files inside the Firefox.app bundle. You'll need to do the editing as either root (via the command line, perhaps using sudo), or as the owner of the files in the Firefox bundle; typically the admin user that installed Firefox.

Take care when editing. If you use a GUI editor, make sure you save any new or changed files as plain text and that no extra extensions are appended to the end of the filename.

You will start by editing the file /Applications/Firefox.app/Contents/MacOS/greprefs/all.js.

Add the following to the end of this file:

 // MyOrganization additions
pref("general.config.obscure_value", 0);
pref("general.config.filename", "firefox_AA.cfg");

Feel free to change "MyOrganization" to the actual name of your organization. What we're doing here is telling Firefox to read the file named here for additional configuration info. The "general.config.obscure.value" tells Firefox the file will be in plain text; by default it expects the file to be obscured with ROT13 encoding, where 13 is added to the ASCII value of every character. The reasons for this are lost in the mists of antiquity.

Save the /Applications/Firefox.app/Contents/MacOS/greprefs/all.js file. Now create a new file at /Applications/Firefox.app/Contents/MacOS/firefox_AA.cfg with the following contents:

// This file sets some prefs for use at MyOrganization
// and locks down some other prefs.
// set proxy config
pref("network.proxy.autoconfig_url", "http://www.myorg.org/auto.proxy");
pref("network.proxy.type", 2);
// disable application updates
lockPref("app.update.enabled", false);
lockPref("app.update.autoUpdateEnabled", false);
lockPref("extensions.update.enabled", false);
lockPref("extensions.update.autoUpdate", false);
lockPref("browser.search.update", false);
// disable default browser check
pref("browser.shell.checkDefaultBrowser", false);

Again, make sure you save it as a plain text file with the name "firefox_AA.cfg" in the directory "/Applications/Firefox.app/Contents/MacOS/". Double-check your work via the command line:

> cd /Applications/Firefox.app/Contents/MacOS/
> ls -al firefox_AA.cfg 
-rw-rw-r—  1 admin  admin  636 Jul 23 13:22 firefox_AA.cfg
> cat firefox_AA.cfg

That last command (cat firefox_AA.cfg) should return the exact contents you entered when you created the file.

In this example, we used two different commands: pref(), and lockPref(). For the proxy, I wanted the user to be able to modify the proxy if needed, but have it return to our recommended settings on the next launch. For the application updates, I wanted to prevent the user from turning these back on. Your requirements may differ.

With everything saved and double-checked, try launching Firefox. You should find these settings exactly as you specified, and in the case of the update prefs, locked:


Note how the corresponding controls are grayed-out and unavailable.

Default Home Page

One important preference is a little harder to manage: the default home page. You might get a clue of why this is so by looking at the preferences in about:config:


You'll see that the browser.startup.homepage points to another file, instead of just being a normal URL. You can set it to a normal URL, and it usually works, but I've found it unreliable. So instead of setting a preference, we'll edit the contents of browserconfig.properties:

Open /Applications/Firefox.app/Contents/MacOS/browserconfig.properties, delete its entire contents, and replace them with:

browser.startup.homepage=http://homepage.myorg.org
browser.startup.homepage_reset=http://homepage.myorg.org

Of course you want to substitute your own URL for the home page.

Now quit and relaunch Firefox. Unless you've set a custom home page, you'll be taken to the home page you defined. Users have the ability to override this if they want. If you truly wanted to enforce a home page, adding

pref("browser.startup.homepage", "http://homepage.myorg.org");
pref("browser.startup.homepage_reset", "http://homepage.myorg.org");

to /Applications/Firefox.app/Contents/MacOS/firefox_AA.cfg should get the behavior you want, but your users may dislike you.

Now that you've modified the Firefox.app bundle, you'll need to push out these changes to all your machines. I hope you have a software distribution mechanism in your organization!

More Info

Congratulations! You've added a few new tricks to your toolbox. For more information on Mozilla/Firefox preferences and configuration, check out these URLs:

http://kb.mozillazine.org/Firefox_:_FAQs_:_About:config_Entries

http://preferential.mozdev.org/preferences.html

http://developer.mozilla.org/en/Automatic_Mozilla_Configurator/Locked_config_settings


Greg Neagle is a member of the steering committee of the Mac OS X Enterprise Project (macenterprise.org) and is a senior systems engineer at a large animation studio. Greg has been working with the Mac since 1984, and with OS X since its release. He can be reached at gregneagle@mac.com.

 
AAPL
$100.75
Apple Inc.
+0.64
MSFT
$46.36
Microsoft Corpora
-0.08
GOOG
$577.36
Google Inc.
+1.00

MacTech Search:
Community Search:

Software Updates via MacUpdate

QuickBooks 2015 16.0.0.1352 R1 - Financi...
QuickBooks 2015 helps you manage your business easily and efficiently. Organize your finances all in one place, track money going in and out of your business, and spot areas where you can save.... Read more
Mac DVDRipper Pro 5.0.1 - Copy, backup,...
Mac DVDRipper Pro is the DVD backup solution that lets you protect your DVDs from scratches, save your batteries by reading your movies from your hard disk, manage your collection with just a few... Read more
Apple OS X bash Update 1.0 - Fix for sec...
The OS X bash Update fixes a security flaw in the bash UNIX shell on OS X 10.9.5 (also on OS X 10.8 and 10.7 [see Related Links below]). OS X 10.9.5 or later Downloads for OS X 10.8 and OS X 10.7 in... Read more
SyncTwoFolders 2.0.5 - Syncs two user-sp...
SyncTwoFolders simply synchronizes two folders. It supports synchronization across mounted network drives and it is a possibility to run a simulation showing in a log what will be done. Please visit... Read more
FinderPop 2.5.7 - Classic Mac utility, n...
FinderPop is a Universal preference pane that extends OS X's contextual menus using a FinderPop Items folder much as the Apple Menu Items folder used to do for the Apple menu. It has other features... Read more
VueScan 9.4.45 - Scanner software with a...
VueScan is a scanning program that works with most high-quality flatbed and film scanners to produce scans that have excellent color fidelity and color balance. VueScan is easy to use, and has... Read more
LibreOffice 4.3.2.2 - Free Open Source o...
LibreOffice is an office suite (word processor, spreadsheet, presentations, drawing tool) compatible with other major office suites. The Document Foundation is coordinating development and... Read more
calibre 2.4 - Complete e-library managem...
Calibre is a complete e-book library manager. Organize your collection, convert your books to multiple formats, and sync with all of your devices. Let Calibre be your multi-tasking digital... Read more
Default Folder X 4.6.9b1 - Enhances Open...
Default Folder X attaches a toolbar to the right side of the Open and Save dialogs in any OS X-native application. The toolbar gives you fast access to various folders and commands. You just click... Read more
Beamer 2.0.4 - Stream any movie file fro...
Beamer streams to your Apple TV.... Plays any movie file - Just like the popular desktop movie players, Beamer accepts all common formats, codecs and resolutions. AVI, MKV, MOV, MP4, WMV, FLV. To... Read more

Latest Forum Discussions

See All

WW2: Sandbox. Strategy & Tactics (G...
WW2: Sandbox. Strategy & Tactics 1.0.0 Device: iOS Universal Category: Games Price: $9.99, Version: 1.0.0 (iTunes) Description: Sandbox is the unlimited sequel to our Strategy & Tactics: World War II. We've abandoned... | Read more »
apeFilter (Music)
apeFilter 1.0 Device: iOS Universal Category: Music Price: $6.99, Version: 1.0 (iTunes) Description: | Read more »
Shred It! Review
Shred It! Review By Jennifer Allen on September 30th, 2014 Our Rating: :: GORGEOUS BUT BASICUniversal App - Designed for iPhone and iPad It might look lovely, but Shred It! is a pretty shallow endless runner/snowboarding game.   | Read more »
It Came From Canada: Angry Birds: Transf...
Anyone afraid that throwing Transformers into the Angry Birds mix would result in a Michael Bay-level of childhood pillaging can rest easy. While Rovio’s famous fowls may be a 21st century staple, Angry Birds: Transformers wears its affection for... | Read more »
Galaxy Trucker Review
Galaxy Trucker Review By Rob Thomas on September 30th, 2014 Our Rating: :: IN FOR THE LONG HAULiPad Only App - Designed for the iPad We got a great big convoy, rockin’ through the night… the endless night of outer space, that is.... | Read more »
Moon and Sun – children’s book Review
Moon and Sun – children’s book Review By Amy Solomon on September 30th, 2014 Our Rating: Moon and Sun is a fable-like children’s book with lush illustrations.   Developer: Marcio Monteiro Price: $3.99 Version: 1.0 App Reviewed on... | Read more »
Kairosoft Finally Brings The Pyraplex to...
Kairosoft Finally Brings The Pyraplex to iOS Posted by Jessica Fisher on September 30th, 2014 [ permalink ] Universal App - Designed for iPhone and iPad | Read more »
Yeti’s Parole Officer Review
Yeti’s Parole Officer Review By Jennifer Allen on September 30th, 2014 Our Rating: Universal App - Designed for iPhone and iPad Yeti’s Parole Officer proves that looks aren’t everything in this entertaining, if plain, piece of... | Read more »
Record Keeper and World Wide Words – Two...
Record Keeper and World Wide Words – Two New Final Fantasy Games Arrive on iOS in Japan Posted by Ellis Spice on September 30th, 2014 [ permalink ] | Read more »
iPollute Review
iPollute Review By Nadia Oxford on September 30th, 2014 Our Rating: :: iPOLLUTE, uPOLLUTEUniversal App - Designed for iPhone and iPad iPollute is a delightful-looking pollution simulator, though it’s a bit light on “game” content... | Read more »

Price Scanner via MacPrices.net

Apple Boycotts German Magazine Computer Bild...
Apple has revoked its PR accreditation of Germany’s Computer Bild, Europe’s best-selling PC magazine, in reaction to Bild’s posting of a “#Bentgate” YouTube video. Axel Telzerow, editor in chief of... Read more
iPhone 6 & iPhone 6 Plus Available in Chi...
Apple has announced that iPhone 6 and iPhone 6 Plus will be available in China beginning Friday, October 17 from the Apple Online Store (http://www.apple.com), Apple’s retail stores, and an expansive... Read more
MacBook Airs on sale for $100 off MSRP, start...
Best Buy has the new 2014 MacBook Airs on sale for $100 off MSRP on their online store. Choose free home shipping or free local store pickup (if available). Prices valid for online orders only, in-... Read more
Apple Releases OS X Mavericks bash Update 1.0...
Apple has released a patch update for OS X Mavericks users to address the recently-detected “Shellshock” security bug in BSD UNIX’s bash shell. Apple says only a few Mac users who had manually... Read more
Pivotal Payments Ready for Apple Pay – FlexPo...
Pivotal Payments, a provider of merchant services and global payment processing solutions, has announced its proprietary FlexPoint platform will support credit and debit transactions through Apple’s... Read more
iStabilizer Announces Tabarm — First Friction...
iStabilizer, a specialist in universal lightweight compact tripods, steady cams, dollies, mounts, and remotes for smartphones, tablets, and cameras, announced today the iStabilizer tabArm, the first... Read more
IStabilizer Flex Smartphone Tripod Wins Usa T...
iStabilizer, a specialist in universal lightweight compact tripods, steady cams, and other products for smartphones, tablets, and cameras, has announced today that its iStabilizer Flex smartphone... Read more
13-inch 2.8GHz Retina MacBook Pro on sale for...
B&H Photo has the new 2014 13″ 2.8GHz Retina MacBook Pro on sale for $1699.99 including free shipping plus NY sales tax only. They’ll also include free copies of Parallels Desktop and LoJack for... Read more
15-inch Retina MacBook Pros on sale for up to...
B&H Photo has the new 2014 15″ Retina MacBook Pros on sale for up to $150 off MSRP. Shipping is free, and B&H charges NY sales tax only. They’ll also include free copies of Parallels Desktop... Read more
Get Down to Business On Your iPad With Free N...
Utah based Poem LLC has introduced Nexticy 1.0, a full-featured, affordable (Free) forms application for iPad. Nexticy makes it ‘way easy’ to create, store, retrieve and analyze paper-like forms of... Read more

Jobs Board

*Apple* Retail - Multiple Positions (US) - A...
Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, you're also the Read more
*Apple* Retail - Multiple Positions (US) - A...
Job Description: Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, Read more
Senior Event Manager, *Apple* Retail Market...
…This senior level position is responsible for leading and imagining the Apple Retail Team's global event strategy. Delivering an overarching brand story; in-store, Read more
*Apple* Solutions Consultant (ASC) - Apple (...
**Job Summary** The ASC is an Apple employee who serves as an Apple brand ambassador and influencer in a Reseller's store. The ASC's role is to grow Apple Read more
Project Manager / Business Analyst, WW *Appl...
…a senior project manager / business analyst to work within our Worldwide Apple Fulfillment Operations and the Business Process Re-engineering team. This role will work Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.