Difference between revisions of "Firefox"

From Bashlinux
Jump to: navigation, search
Line 51: Line 51:
 
USER=<user>
 
USER=<user>
 
PROGRAM=/usr/sbin/firefox
 
PROGRAM=/usr/sbin/firefox
SESSION=True
+
SESSION=true
 
</nowiki></pre>
 
</nowiki></pre>
   
Line 65: Line 65:
 
session optional pam_xauth.so
 
session optional pam_xauth.so
 
session optional pam_timestamp.so
 
session optional pam_timestamp.so
  +
</nowiki></pre>
  +
  +
  +
=== Fedora 12 and newer versions ===
  +
* The security file on `/etc/security/console.apps/firefox` looks like
  +
  +
<pre><nowiki>
  +
USER=<user>
  +
PROGRAM=/usr/sbin/virt-manager
  +
SESSION=true
  +
. config-util
  +
</nowiki></pre>
  +
  +
* The PAM file on `/etc/pam.d/firefox` looks like
  +
  +
<pre><nowiki>
  +
#%PAM-1.0
  +
auth include config-util
  +
account include config-util
  +
session include config-util
 
</nowiki></pre>
 
</nowiki></pre>

Revision as of 17:36, 15 July 2011

Preferences

Allow Pop-ups

Edit `/usr/lib/${FIREFOX_VERSION}/greprefs/all.js` file and ensure the following values

 pref("privacy.popups.disable_from_plugins",0);
 pref("privacy.popups.showPopupBlocker",false);
 

Add the following values if there are not present

 pref("capability.principal.codebase.p0.granted", "UniversalBrowserWrite");
 pref("capability.principal.codebase.p0.id", "file://");
 pref("capability.principal.codebase.p0.subjectName", ""); 
 pref("privacy.popups.firstTime",false);
 pref("privacy.popups.policy",1);
 pref("privacy.popups.showBrowserMessage",false);
 

And then ensure the following values on `/usr/lib/${FIREFOX_VERSION}/defaults/pref/firefox.js`

 pref("privacy.popups.firstTime",false);
 pref("privacy.popups.showBrowserMessage",false);
 


Disable status bar

Ensure the following values are present in `/usr/lib/${FIREFOX_VERSION}/greprefs/all.js` file

 pref("dom.disable_window_open_feature.status",false);
 pref("dom.disable_window_status_change",true);
 


Run firefox with password protection

The following procedure ensures Firefox will be launched after prompt him for his own password, this is handled by PAM.

  1. Move firefox to `sbin` folder and then link it back to its original place
 mv /usr/bin/firefox /usr/sbin/firefox
 ln -s /usr/bin/consolehelper /usr/bin/firefox
 
  1. Create a security file on `/etc/security/console.apps/firefox` with the following code
 USER=<user>
 PROGRAM=/usr/sbin/firefox
 SESSION=true
 
  1. Create a PAM file on `/etc/pam.d/firefox` with the following entries
 #%PAM-1.0
 auth sufficient pam_rootok.so
 auth sufficient pam_timestamp.so
 auth include system-auth
 account required pam_permit.so
 session required pam_permit.so
 session optional pam_xauth.so
 session optional pam_timestamp.so
 


Fedora 12 and newer versions

  • The security file on `/etc/security/console.apps/firefox` looks like
 USER=<user>
 PROGRAM=/usr/sbin/virt-manager
 SESSION=true
 . config-util
 
  • The PAM file on `/etc/pam.d/firefox` looks like
 #%PAM-1.0
 auth            include         config-util
 account         include         config-util
 session         include         config-util