Bug 1676840 Comment 0 Edit History

Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.

Steps to reproduce:
1. Install Firefox 81 in D:\Program Files.
2. Run update and restart.

Actual result:
UAC prompt appears.

Expected result:
Maintenance service should launch the updater for me.

I have to enter a credential because I'm using a standard user. This is really annoying. Even worse, if I change the install location to C:\Proram Files, I can't inherit my user profile due to the "dedicated profile per installation" feature.

Apparently, this is an intentional change to fix CVE-2020-15663 (bug 1643199). But, could you please actually check whether the install location is user-writable instead of hard-coding allowed directories?
Steps to reproduce:
1. Install Firefox 81 in a non-default location. Make sure that the install directory is *not* user-writable.
2. Run update and restart.

Actual result:
UAC prompt appears.

Expected result:
Maintenance service should launch the updater for me.

I have to enter a credential because I'm using a standard user. This is really annoying. Even worse, if I change the install location to C:\Proram Files, I can't inherit my user profile due to the "dedicated profile per installation" feature.

Apparently, this is an intentional change to fix CVE-2020-15663 (bug 1643199). But, could you please actually check whether the install location is user-writable instead of hard-coding allowed directories?

Back to Bug 1676840 Comment 0