1545539 - Add preferences to new preference policy

Status: VERIFIED FIXED

(Firefox :: Enterprise Policies, defect, P1)

Description

[Mike Kaply [:mkaply]]

I'm going to use one bug to try to collect all the preference requests we have gotten so it's easier to check them in. Here are the first couple.

https://github.com/mozilla/policy-templates/issues/366

gfx.webrender.all

https://github.com/mozilla/policy-templates/issues/338

browser.tabs.warnOnClose

I'll also dupe other bugs to this.

Some of these might get converted to policy in the future, but for now they will be prefs.

Comment 1

[:Felipe Gomes (needinfo for replies!)]

I'd advise against adding a pref for gfx.webrender.all. The feature is not finished yet and the WebRender team has a detailed rollout depending on OS/version/hardware. I don't think it's something that an end user will choose wisely, specially if the person disable it and forget about it, but the feature will progress and continue to be improved.

Comment 2

[Mike Kaply [:mkaply]]

Can you comment in the Github issue and close if necessary?

Comment 3

[Mike Kaply [:mkaply]]

Per the DOD STIG (And other places)

security.default_personal_cert
browser.search.update
dom.disable_window_move_resize
dom.disable_window_flip
dom.event.contextmenu.enabled

Comment 4

[Mike Taylor [:miketaylr]]

Related to https://docs.google.com/document/d/1fT2v8cOKRhCiLSUiqu7slfwL4fg2_MJektVLn58PVvc/edit, it would be nice to have a policy in the 68/ESR window for the following:

dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode (which takes a hostname of an affected webapp)

Comment 5

[Mike Kaply [:mkaply]]

extensions.getAddons.showPane for turning off the discovering addons pane

Comment 6

[Mike Kaply [:mkaply]]

browser.cache.disk.enable - see bug 1429183

Comment 8

[Mike Kaply [:mkaply]]

app.update.auto (versus adding a new policy). this is so people can lock it on.

Comment 9

[Mike Kaply [:mkaply]]

places.history.enabled

Comment 10

[Mike Kaply [:mkaply]]

ui.key.menuAccessKeyFocuses - handy if web applications interfere and use alt.

Comment 11

[Mike Kaply [:mkaply]]

// This is the bundled codec used for video chat in WebRTC
user_pref("media.gmp-gmpopenh264.enabled", false); // (hidden pref)
// disable widevine CDM (Content Decryption Module) [SETUP]
user_pref("media.gmp-widevinecdm.enabled", false);

This would be primarily for environments that don't want outside downloads.

Comment 12

[Mike Kaply [:mkaply]]

Attachment: Bug 1545539 - Add enterprise requested preferences to policy.

Comment 15

[Mike Kaply [:mkaply]]

We've had reports that people are disabling telemetry just to prevent the second tab on startup.

So we should add a pref for:

datareporting.policy.dataSubmissionPolicyBypassNotification

Comment 16

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/91786919a41c
Add enterprise requested preferences to policy. r=Dolske

Comment 17

[Raul Gurzau (:RaulG)]

https://hg.mozilla.org/mozilla-central/rev/91786919a41c

Comment 19

[Emil Ghitta, QA [:emilghitta]]

This is verified fixed using Firefox 68.0 (BuildId:20190705220548) on Windows 10 64bit (applied via both policies.json and GPO), macOS 10.13.6 and Ubuntu 18.04 64bit.