X
Thinta lapha ukuze uye kuveshini yamakhalekhukhwini kusayithi.

Isithangami Sabeseki

Lolu chungechunge lwabekwa kunqolobane. Uyacelwa ubuze umbuzo omusha uma udinga usizo.

How do I block Firefox apps from being installed?

Kuphostiwe

I am looking for a preference I can embed in a CKK2 deployment of Firefox that will disable the installation of apps. ie. browser.apps.enabled (Boolean, Default=True, True permits apps to be installed, False denies any attempt at installing apps).

Barring that, I'd need to make some way to make the Tools>Apps option go away and advise the network admin to blacklist the apps marketplace site.

Thank you!

Erik

I am looking for a preference I can embed in a CKK2 deployment of Firefox that will disable the installation of apps. ie. browser.apps.enabled (Boolean, Default=True, True permits apps to be installed, False denies any attempt at installing apps). Barring that, I'd need to make some way to make the Tools>Apps option go away and advise the network admin to blacklist the apps marketplace site. Thank you! Erik

Isisombululo esikhethiwe

you're right that there probably isn't a preference for the purpose you're looking for - https://bugzilla.mozilla.org/show_bug.cgi?id=790149

Funda le mpendulo ngokuhambisana nalesi sihloko 1

Eminye Imininingwane Yohlelo

Fakela amapulagi

  • Adobe® Acrobat® Plug-in for Web Browsers, Version 15.007.20033
  • A plugin to detect whether the Adobe Application Manager is installed on this machine.
  • Provides information about the default web browser
  • The Flip4Mac WMV Plugin allows you to view Windows Media content using QuickTime.
  • Displays Java applet content, or a placeholder if Java is not installed.
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in web pages. For more information, visit the QuickTime Web site.
  • Microsoft Office for Mac SharePoint Browser Plug-in
  • Shockwave Flash 17.0 r0
  • Adobe Shockwave for Director Netscape plug-in, version 12.0.7
  • 5.1.20913.0
  • The VMware Client Support Plug-in
  • WebEx64 General Plugin Container Version 205

Isisebenziso

  • I-ejenti Engumsebenzisi: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:38.0) Gecko/20100101 Firefox/38.0

Eminye Imininingwane

ideato 893 izisombululo 6250 izimpendulo
Kuphostiwe

Hi Erik

for the second question see if the next helps : empty the string browser.apps.URL and then when click the Tools>Apps you have nothing (nothing works)

thank you

Hi Erik for the second question see if the next helps : empty the string '''browser.apps.URL''' and then when click the Tools>Apps you have nothing (nothing works) thank you
FredMcD
  • Top 10 Contributor
4274 izisombululo 59946 izimpendulo
Kuphostiwe

Other then updates, Firefox should not install anything unless you tell it to. (Plugins are the exception to this.)

Has anything been instilled without your knowledge?

Other then updates, Firefox should not install anything unless you tell it to. (Plugins are the exception to this.) Has anything been instilled without your knowledge?

Umnikazi wombuzo

FredMcD said

Other then updates, Firefox should not install anything unless you tell it to. (Plugins are the exception to this.) Has anything been instilled without your knowledge?

Fred,

This is for a deployment in a school district. I can do what @ideato suggested, but that'll only block one avenue. Since we have to filter everything the students and staff see anyway, it's easier to ask the network admin to block marketplace.mozilla.org. I'm still concerned, though, that third party sites might exist that would allow people to install apps without needing to go to the Marketplace site.

Thanks!

Erik

''FredMcD [[#answer-734322|said]]'' <blockquote> Other then updates, Firefox should not install anything unless you tell it to. (Plugins are the exception to this.) Has anything been instilled without your knowledge? </blockquote> Fred, This is for a deployment in a school district. I can do what @ideato suggested, but that'll only block one avenue. Since we have to filter everything the students and staff see anyway, it's easier to ask the network admin to block marketplace.mozilla.org. I'm still concerned, though, that third party sites might exist that would allow people to install apps without needing to go to the Marketplace site. Thanks! Erik
user293 39 izisombululo 279 izimpendulo
Kuphostiwe

You will want to block addons.mozilla.org as well.

You will want to block addons.mozilla.org as well.
FredMcD
  • Top 10 Contributor
4274 izisombululo 59946 izimpendulo
Kuphostiwe

Unfortunately, that is not quite true. An add-on can be downloaded as a file, and installed by dragging the 'file' into Firefox.

Unfortunately, that is not quite true. An add-on can be downloaded as a file, and installed by dragging the 'file' into Firefox.

Umnikazi wombuzo

XPI (addon) installations can be disabled by setting xpinstall.enabled to false. Other preferences limit the scope of what folders would allow addons to those under the control of the district, but that's getting off topic.

So far most, maybe all, apps are disabled in OS X (the district is Mac-only at the student and teacher level) because their code isn't signed with an Apple Developer's key. I'd like to prevent them from getting that far by disabling the app installation process, using a preference similar to setting the xpinstall.enabled preference to false.

XPI (addon) installations can be disabled by setting xpinstall.enabled to false. Other preferences limit the scope of what folders would allow addons to those under the control of the district, but that's getting off topic. So far most, maybe all, apps are disabled in OS X (the district is Mac-only at the student and teacher level) because their code isn't signed with an Apple Developer's key. I'd like to prevent them from getting that far by disabling the app installation process, using a preference similar to setting the xpinstall.enabled preference to false.
user293 39 izisombululo 279 izimpendulo
Kuphostiwe

You might also want to take a look at mozilla.cfg. If you know what you're doing, you can get around it, but it would take a lot of work, and most people wouldn't know how to do that.

You might also want to take a look at [http://kb.mozillazine.org/Locking_preferences mozilla.cfg]. If you know what you're doing, you can get around it, but it would take a lot of work, and most people wouldn't know how to do that.

Umnikazi wombuzo

user293 said

You might also want to take a look at mozilla.cfg. If you know what you're doing, you can get around it, but it would take a lot of work, and most people wouldn't know how to do that.

I'm using CCK2 to lock down preferences, but thanks for that heads up. Really, I think this may boil down to me wanting to lock down a function that doesn't have a corresponding option for locking it down, in which case all I can really do is obfuscate, misdirect and, when all else fails, tell the students no, you're really really not supposed to do that. Part of my concern comes from the possibility that by cluttering up the Applications folder they'll lose (perhaps intentionally) something they need for schoolwork or hide something they aren't supposed to have in the first place. The other worry is that one (or all) of these apps may eventually pass the Apple Gatekeeper and be allowed to run. Since we don't want them playing games when they're supposed to be working, looking for ways around the filter, or generally doing what they aren't supposed to be during school hours, we put controls in place to limit what can be installed.

''user293 [[#answer-735030|said]]'' <blockquote> You might also want to take a look at [http://kb.mozillazine.org/Locking_preferences mozilla.cfg]. If you know what you're doing, you can get around it, but it would take a lot of work, and most people wouldn't know how to do that. </blockquote> I'm using [https://addons.mozilla.org/en-US/firefox/addon/cck2wizard CCK2] to lock down preferences, but thanks for that heads up. Really, I think this may boil down to me wanting to lock down a function that doesn't have a corresponding option for locking it down, in which case all I can really do is obfuscate, misdirect and, when all else fails, tell the students no, you're really really not supposed to do that. Part of my concern comes from the possibility that by cluttering up the Applications folder they'll lose (perhaps intentionally) something they need for schoolwork or hide something they aren't supposed to have in the first place. The other worry is that one (or all) of these apps may eventually pass the Apple [https://support.apple.com/en-us/HT202491 Gatekeeper] and be allowed to run. Since we don't want them playing games when they're supposed to be working, looking for ways around the filter, or generally doing what they aren't supposed to be during school hours, we put controls in place to limit what can be installed.
philipp
  • Top 25 Contributor
  • Moderator
5324 izisombululo 23513 izimpendulo
Kuphostiwe

Isisombululo Esikhethiwe

you're right that there probably isn't a preference for the purpose you're looking for - https://bugzilla.mozilla.org/show_bug.cgi?id=790149

you're right that there probably isn't a preference for the purpose you're looking for - https://bugzilla.mozilla.org/show_bug.cgi?id=790149

Umnikazi wombuzo

philipp said

you're right that there probably isn't a preference for the purpose you're looking for - https://bugzilla.mozilla.org/show_bug.cgi?id=790149

Not the answer I was hoping for, but maybe in some later release... Aw well.

''philipp [[#answer-735038|said]]'' <blockquote> you're right that there probably isn't a preference for the purpose you're looking for - https://bugzilla.mozilla.org/show_bug.cgi?id=790149 </blockquote> Not the answer I was hoping for, but maybe in some later release... Aw well.
user293 39 izisombululo 279 izimpendulo
Kuphostiwe

ejep520 said

Part of my concern comes from the possibility that by cluttering up the Applications folder they'll lose (perhaps intentionally) something they need for schoolwork or hide something they aren't supposed to have in the first place.

On OS X, you have to be an admin to add files to the applications folder.

''ejep520 [[#answer-735033|said]]'' <blockquote> Part of my concern comes from the possibility that by cluttering up the Applications folder they'll lose (perhaps intentionally) something they need for schoolwork or hide something they aren't supposed to have in the first place. </blockquote> On OS X, you have to be an admin to add files to the applications folder.
FredMcD
  • Top 10 Contributor
4274 izisombululo 59946 izimpendulo
Kuphostiwe

One thing you can think about is for each user to have their own user account without administrative rights. Then, each one would have their own Firefox profile.


Their are some third party programs that can check for games and other employer unwanted programs.

One thing you can think about is for each user to have their own user account without administrative rights. Then, each one would have their own Firefox profile. ------------------------ Their are some third party programs that can check for games and other employer unwanted programs.
John99 971 izisombululo 13138 izimpendulo
Kuphostiwe

No answers just a few comments

If you find an answer or somewhere to discuss this feel free to post back with a suitable link. To me this seems a potential child safety issue.

No answers just a few comments * You already use [https://addons.mozilla.org/en-US/firefox/addon/cck2wizard/ CCK2] no doubt you have already looked through [https://addons.mozilla.org/en-US/firefox/addon/cck2wizard/ Kaply's blogs] & the revamped support site. ** I did notice http://cck2.freshdesk.com/support/discussions/topics/4000318741 but no response as yet * I know you are asking specifically about Apps but you may also be interested to know addons will soon need to be signed by Mozilla ** Note bug [https://bugzilla.mozilla.org/page.cgi?id=etiquette.html etiquette] ** [https://bugzilla.mozilla.org/show_bug.cgi?id=1047239 Bug 1047239 - (signed-addons) Add-on signing revamp ] ** https://blog.mozilla.org/addons/2015/02/10/extension-signing-safer-experience/ *** https://blog.mozilla.org/addons/2015/05/27/update-signing-new-developer-agreement/ * I suspect it is relatively easy to [https://developer.mozilla.org/en-US/docs/Web/API/DOMApplicationsRegistry/installPackage install apps]; even custom made private ones, and although their privileges within Firefox may be limited that is not your major concern. <br />'''You would be better discussing this somewhere where decision makers and developers will see it.''' I am not sure where it would be on topic and noticed. The question may well have been asked and answered. Look at ** [https://www.mozilla.org/en-US/about/forums forums] ***[https://www.mozilla.org/en-US/about/forums/#addons-user-experience #addons-user-experience] *** '''[https://www.mozilla.org/en-US/about/forums/https://www.mozilla.org/en-US/about/forums/#dev-marketplace #dev-marketplace]''' *** [https://www.mozilla.org/en-US/about/forums/#governance #governance] If you find an answer or somewhere to discuss this feel free to post back with a suitable link. To me this seems a potential child safety issue.

Okulungisiwe ngu John99

cor-el
  • Top 10 Contributor
  • Moderator
17591 izisombululo 159130 izimpendulo
Kuphostiwe

Apps are not installed in the Firefox profile folder, but are installed as an application in your Mac user account. On Linux I see them as a hidden folder in my home directory with the name of the website: .http;www.xxxx.com

You can set this pref to an empty string to clear the whitelist.

  • dom.mozApps.signed_apps_installable_from

See:

3862     // Only allow signed apps to be installed from a whitelist of
3863     // domains, and require all packages installed from any of the
3864     // domains on the whitelist to be signed. This is a stopgap until
3865     // we have a real story for handling multiple app stores signing
Apps are not installed in the Firefox profile folder, but are installed as an application in your Mac user account. On Linux I see them as a hidden folder in my home directory with the name of the website: .http;www.xxxx.com You can set this pref to an empty string to clear the whitelist. * dom.mozApps.signed_apps_installable_from See: *http://mxr.mozilla.org/mozilla-release/source/dom/apps/Webapps.jsm <pre><nowiki> 3862 // Only allow signed apps to be installed from a whitelist of 3863 // domains, and require all packages installed from any of the 3864 // domains on the whitelist to be signed. This is a stopgap until 3865 // we have a real story for handling multiple app stores signing </nowiki></pre>