Deploying Firefox

[Michael]

You should be OK disabling SSL2.0 as SSL3.0 is 'more secure' in the way it works. You don't need the FrontMotion MSI, if anything it just complicates things.

Extract the Firefox WinRAR file to a deployment directory on your server such as:

\\SERVERNAME\DEPLOYMENT

Double click: Mozilla Firefox (3.6) Logistix > Program Files > Mozilla Firefox

Make the changes you want here, then deploy the MSI. That's all you have to do!

[digone52]

Hi Michael.

Thanks for that.

I think I've done the right thing - I've downloaded version 3.6 from logistixonline.com, and see that the files are there to edit.

Looks good.

Can I ask you some questions which I'm a bit embarassed to ask.

If I use the version from LogistixOnline, does this tie me into using this version in future for updates?

Will LogistixOnline be kept bang up-to-date with security updates to Firefox?

Rather than using incremental updates to Firefox, does deploying a an MSI for updates cause any issues such as extended time taken to deploy?

Thanks again.

[Michael]

You can use any version of Firefox you like, however the version I have created is 'ready to deploy' with minor modifications.

I can't promise I'll create a version for every Firefox release, but only where there's a need. Alternatively you can create your own version by downloading the latest Firefox browser from Mozilla and using WinstallLE create your own MSIs/customisations. You're free to copy the modifications I have compiled

[digone52]

Thanks Michael.

Can the "Add-ons" window be supressed do you know?

I've noticed on what I've done so far that when you update Java for instance, on first start-up of Firefox, the Add-on manager starts, giving the pupil the option of disabling Java - not very desirable!

Thanks again.

[pagelad]

Thanks for this,

Ive tested it and seem to get an error stating "failed to read configuration file"

I have used the mozzilla text and byteshifted it, i dont see what im doing wrong

[pagelad]

Its ok, im a numpty!

[Michael]

Ive tested it and seem to get an error stating "failed to read configuration file"

Double check you've copied my code in full otherwise it won't work properly. If it works with my code, double check your changes.

Can the "Add-ons" window be supressed do you know?

It will appear on first use, however once closed it shouldn't appear again. If you're using mandatory files, you need to update these so the the Add-ons window doesn't appear everytime.

[digone52]

Hi.

Don't know if you're interested, but I've stopped use of "chrome:" "file:" "C:\" "about:" "resource:" by editing browser.js to send all uses of these to about:blank

To do this, I installed 7Zip, and opened chrome\browser.jar to extract browser.js.

I edited browser.js in Notepad++, and changed the loadURI function the following...

function loadURI(uri, referrer, postData, allowThirdPartyFixup)
{
// Next section added to stop users from accessing stuff
var uri2 = uri.toLowerCase();
if (uri2.match(/^file:/) ||
uri2.match(/^\//) ||
uri2.match(/^c:/) ||
uri2.match(/^d:/) ||
uri2.match(/^chrome:/) ||
uri2.match(/^resource:/) ||
(!uri2.match(/^about:blank/) &&
uri2.match(/^about:/))) {
uri = "about:blank";
}


try {
if (postData === undefined)
postData = null;
var flags = nsIWebNavigation.LOAD_FLAGS_NONE;
if (allowThirdPartyFixup) {
flags = nsIWebNavigation.LOAD_FLAGS_ALLOW_THIRD_PARTY_FIXU P;
}
gBrowser.loadURIWithFlags(uri, flags, referrer, null, postData);
} catch (e) {
}
}

You could presumably redirect this to any URL you like, such as a misuse warning.

You can also do the following to the LightWeightThemeWebInstaller to stop all themes from installing...

// inserted a "2" in the next line to stop theme installation
var LightWeightThemeWebInstaller2 = {


Just put browser.js back into browser.jar, and you're away.

There are probably better ways of doing this, but this does work well.

Hope this helps.

[Michael]

Thanks, I am aware disabling file browsing within Firefox is possible but it doesn't really create a security risk. By all means though add your own customisations for your own deployments

[digone52]

I'll share with you something else I've found.

In the same way as my previous post, if you edit broswer.xul and remove this...

<key id="addBookmarkAsKb" key="&bookmarkThisPageCmd.commandkey;" command="Browser:AddBookmarkAs" modifiers="accel"/>
<key id="bookmarkAllTabsKb" key="&bookmarkThisPageCmd.commandkey;" command="Browser:BookmarkAllTabs" modifiers="accel,shift"/>
<key id="manBookmarkKb" key="&bookmarksCmd.commandkey;" command="Browser:ShowAllBookmarks" modifiers="accel,shift"/>
<key id="viewBookmarksSidebarKb" key="&bookmarksCmd.commandkey;" command="viewBookmarksSidebar" modifiers="accel"/>
<key id="viewBookmarksSidebarWinKb" key="&bookmarksWinCmd.commandkey;" command="viewBookmarksSidebar" modifiers="accel"/>

<key id="key_gotoHistory"
key="&historySidebarCmd.commandKey;"
modifiers="accel"
command="viewHistorySidebar"/>

... it disables Ctrl D, Ctrl B, Ctrl H, Shift Ctrl B.

I think by doing this, and doing a few other tweaks, you can completely mask off the use of bookmarks, RSS, history.

Regarding the previous posting, access to file:, I guess it's down to the schools policy, but we don't want pupils being able to browse and copy files off the C: drive. If you've blocked the pupils from browsing the C: drive in Explorer via GPO, then they will still be able to browse the C: drive using Firefox unless you implement this kind of fix. I suspect that blocking access to chrome: is more important though.

[pagelad]

This has come in really handy and ive moved most of my schools across to this.

Will there be a .6.2 release coming soon we can upgrade to?

Thanks for your help

[Michael]

Mozilla Firefox 3.6.3 Logistix is now available for download, happy dayz!

[DaveP]

Mozilla Firefox 3.6.3 Logistix is now available for download, happy dayz!

Hi Michael,

Thanks for that. But a previous version of your package is the only thing that is keeping our Internet connection [for staff] alive [Internet Explorer proxy settings have been corrupted (somehow)]

So I will stay where I am for now.

[Michael]

Good to know it's being put to good use! I don't think your staff would appreciate no connection at all

Two things come to mind regarding IE. Firstly check your GPO settings and secondly, you could alternatively run a silent reg file as proxy settings are in clear text within the registry. It should be easy enough to find and correct.

[rbouman]

Hi.

Don't know if you're interested, but I've stopped use of "chrome:" "file:" "C:\" "about:" "resource:" by editing browser.js to send all uses of these to about:blank

To do this, I installed 7Zip, and opened chrome\browser.jar to extract browser.js.

I edited browser.js in Notepad++, and changed the loadURI function the following...

function loadURI(uri, referrer, postData, allowThirdPartyFixup)
{
// Next section added to stop users from accessing stuff
var uri2 = uri.toLowerCase();
if (uri2.match(/^file:/) ||
uri2.match(/^\//) ||
uri2.match(/^c:/) ||
uri2.match(/^d:/) ||
uri2.match(/^chrome:/) ||
uri2.match(/^resource:/) ||
(!uri2.match(/^about:blank/) &&
uri2.match(/^about:/))) {
uri = "about:blank";
}


try {
if (postData === undefined)
postData = null;
var flags = nsIWebNavigation.LOAD_FLAGS_NONE;
if (allowThirdPartyFixup) {
flags = nsIWebNavigation.LOAD_FLAGS_ALLOW_THIRD_PARTY_FIXU P;
}
gBrowser.loadURIWithFlags(uri, flags, referrer, null, postData);
} catch (e) {
}
}

You could presumably redirect this to any URL you like, such as a misuse warning.

You can also do the following to the LightWeightThemeWebInstaller to stop all themes from installing...

// inserted a "2" in the next line to stop theme installation
var LightWeightThemeWebInstaller2 = {


Just put browser.js back into browser.jar, and you're away.

There are probably better ways of doing this, but this does work well.

Hope this helps.

When i try this, nothing happens when you type in valid url. I was using 7zip portable, edited carefully in notepad2 and when prompted saved it back to the jar file.
I've tried twice. Will try again to edit it with notepad++ instead.
what saved my hide is the backup browser.jar file from a portable install.

did you use any specific settings in 7zip? because i went from 2028kb to 1770kb by adding your data. that can't be right can it?
maybe a step-by-step instruct for browser.jar dummy editors... :-)