-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I suppose if you disabled firefox from looking at the users home directory (either in Documents and Settings or /home, whichever platform you are on) for the Application Data\Mozilla or .mozilla folders, you could then write protect the application directory to prevent the installation of plugins.
Another problem, especially on windows is that >90% of the users out there run with local admin privileges which means that they can access all folders on the local machine. The bulk of the remaining users generally run with "Power User" privileges which still gives them write access to program files. Actually, the more I think about this the harder it seems. I know for my clients, since disabling USB keys is not an option, anyone could bring a portable version of Firefox in and then run that off of a pendrive. What we settled on instead is an authenticating proxy (squid) that requires an Active Directory account (or really any authentication scheme you happen to have locally). We then don't need to worry about cross platform support and any problem users are easily disabled. Of course you could always compile your own version of firefox without plugin support. You would also have to build for each platform that you support. Seems like a lot of effort for a marginal gain, especially when you consider usb drives. Tom Weniger wrote: | On Tue, Jun 17, 2008 at 10:04 PM, TekBudda <[EMAIL PROTECTED]> wrote: |> Someone asked me this question & I don't have an answer for them. I |> have googled and so far no answer. |> |> Anyone know if you can lock down Firefox so that a user can't install |> extensions into it? And would it work in a cross-platform environment? |> |> Any information would be great. |> |> | | Greetings, | | Have you checked the about:config page in Firefox? It shows many | parameters for extensions and you can google the interesting ones for | more info. HtH. | | -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIWVIlwRXgH3rKGfMRAsLCAJsHhT4txJwtxM+OEooFPStmUdVKCQCgjHCV zlLrQskGvEkkKJVetQ4hL7Y= =Csot -----END PGP SIGNATURE----- _______________________________________________ clug-talk mailing list [email protected] http://clug.ca/mailman/listinfo/clug-talk_clug.ca Mailing List Guidelines (http://clug.ca/ml_guidelines.php) **Please remove these lines when replying
