Closed Bug 1443242 Opened 2 years ago Closed 2 years ago

Policy: Block about:debugging when InstallAddons -> Default=false is in use

Categories

(Firefox :: Enterprise Policies, defect)

defect
Not set

Tracking

()

RESOLVED FIXED
Firefox 61
Tracking Status
firefox60 + fixed
firefox61 --- fixed

People

(Reporter: mkaply, Assigned: kanika16047)

References

Details

Attachments

(1 file)

We need to disable about:debugging. I see a few options.

1. Add a unique policy.
2. Disable as part of disabling add-on installs.
3. Disable as part of the developer tools policies.

Thoughts?
We can make it as part of _both_ add-on installs or developer tools..

As an example, we added disabling devtools.chrome.enabled to DisableAboutConfig too
Assignee: nobody → kanika16047
Comment on attachment 8965022 [details]
Bug 1443242 - Disable about:debugging in InstallAddons Policy

https://reviewboard.mozilla.org/r/233758/#review239394

::: browser/components/enterprisepolicies/Policies.jsm:513
(Diff revision 1)
>        if ("Allow" in param) {
>          addAllowDenyPermissions("install", param.Allow, null);
>        }
>        if ("Default" in param) {
>          setAndLockPref("xpinstall.enabled", param.Default);
> +        manager.disallowFeature("about:debugging");

The policy supports locking the "xpinstall.enabled" pref to both true or false. It probably doesn't make a lot of sense as a use-case for someone locking it to true (which is already the default), but it could happen.

So, just to be 100% correct, we only want to block about:debugging when param.Default is false  (i.e., the sys admin is blocking add-ons from being installed)
Comment on attachment 8965022 [details]
Bug 1443242 - Disable about:debugging in InstallAddons Policy

https://reviewboard.mozilla.org/r/233760/#review239404

Awesome! Thanks!

I'll land this now
Attachment #8965022 - Flags: review?(felipc) → review+
Pushed by felipc@gmail.com:
https://hg.mozilla.org/integration/mozilla-inbound/rev/26c8dafa2070
Disable about:debugging in InstallAddons Policy. r=felipe
Summary: Policy: Disable about:debugging → Policy: Block about:debugging when InstallAddons -> Default=false is in use
[Tracking Requested - why for this release]:
Enterprise Policies
Comment on attachment 8965022 [details]
Bug 1443242 - Disable about:debugging in InstallAddons Policy

Approval Request Comment
[Feature/Bug causing the regression]: Follow-up to bug 1429131
[User impact if declined]: Extensions can be side-loaded through about:debugging, even though the block installs policy is in use
[Is this code covered by automated tests?]: no
[Has the fix been verified in Nightly?]: not yet
[Needs manual test from QE? If yes, steps to reproduce]: qa will verify it
[List of other uplifts needed for the feature/fix]: bug 1429131
[Is the change risky?]: no
[Why is the change risky/not risky?]: uses the same system to block about: pages as other policies
[String changes made/needed]: none
Attachment #8965022 - Flags: approval-mozilla-beta?
https://hg.mozilla.org/mozilla-central/rev/26c8dafa2070
Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → Firefox 61
Comment on attachment 8965022 [details]
Bug 1443242 - Disable about:debugging in InstallAddons Policy

enterprise policy, approved for 60.0b11
Attachment #8965022 - Flags: approval-mozilla-beta? → approval-mozilla-beta+
You need to log in before you can comment on or make changes to this bug.