Firefox

Preferences

Allow Pop-ups

Edit `/usr/lib/${FIREFOX_VERSION}/greprefs/all.js` file and ensure the following values

 pref("privacy.popups.disable_from_plugins",0);
 pref("privacy.popups.showPopupBlocker",false);
 

Add the following values if there are not present

 pref("capability.principal.codebase.p0.granted", "UniversalBrowserWrite");
 pref("capability.principal.codebase.p0.id", "file://");
 pref("capability.principal.codebase.p0.subjectName", ""); 
 pref("privacy.popups.firstTime",false);
 pref("privacy.popups.policy",1);
 pref("privacy.popups.showBrowserMessage",false);
 

And then ensure the following values on `/usr/lib/${FIREFOX_VERSION}/defaults/pref/firefox.js`

 pref("privacy.popups.firstTime",false);
 pref("privacy.popups.showBrowserMessage",false);
 

Disable status bar

Ensure the following values are present in `/usr/lib/${FIREFOX_VERSION}/greprefs/all.js` file

 pref("dom.disable_window_open_feature.status",false);
 pref("dom.disable_window_status_change",true);
 

Run firefox with password protection

The following procedure ensures Firefox will be launched after prompt him for his own password, this is handled by PAM.

1. Move firefox to `sbin` folder and then link it back to its original place

 mv /usr/bin/firefox /usr/sbin/firefox
 ln -s /usr/bin/consolehelper /usr/bin/firefox
 

1. Create a security file on `/etc/security/console.apps/firefox` with the following code

 USER=<user>
 PROGRAM=/usr/sbin/firefox
 SESSION=true
 

1. Create a PAM file on `/etc/pam.d/firefox` with the following entries

 #%PAM-1.0
 auth sufficient pam_rootok.so
 auth sufficient pam_timestamp.so
 auth include system-auth
 account required pam_permit.so
 session required pam_permit.so
 session optional pam_xauth.so
 session optional pam_timestamp.so
 

Fedora 12 and newer versions

• The security file on `/etc/security/console.apps/firefox` looks like

 USER=<user>
 PROGRAM=/usr/sbin/virt-manager
 SESSION=true
 . config-util
 

• The PAM file on `/etc/pam.d/firefox` looks like

 #%PAM-1.0
 auth            include         config-util
 account         include         config-util
 session         include         config-util