Skip to main content
Solved

Disable Data Collection Features in Firefox


Forum|alt.badge.img+4
  • Contributor
  • 13 replies

Hello fellow Jamf Admins,

I have a request in from our InfoSec team to disable the data collection features within Firefox. I have tried pushed config profiles with custom settings to turn them off. Here's the output:

<key>DataCollection</key>
<dict>
<key>Experimentation</key>
<false/>
<key>HealthReport</key>
<false/>
<key>Submission</key>
<false/>
<key>Telemetry</key>
<false/>
</dict>

 

Firefox is not changing the settings though. It seems to not care about the plist at all. Has anyone run into an issue like this and if so, how did you get Firefox to behave?

 

Thanks in advance!

Best answer by sdagley

@TWF Firefox seems to require a configuration .plist that doesn't necessarily use exactly the same key name as the preference setting. For example here is a profile to disable DNS over HTTPS:

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>EnterprisePoliciesEnabled</key> <true/> <key>DNSOverHTTPS__Enabled</key> <false/> <key>DNSOverHTTPS__Locked</key> <true/> </dict> </plist>

I don't know if the setting you're looking to set have the same issue, so you'll need to check on that.

The "EnterprisePoliciesEnabled" key set to "true" is required otherwise Firefox will ignore any settings you're trying to manage.

View original
Did this topic help you find an answer to your question?

4 replies

sdagley
Forum|alt.badge.img+25
  • Jamf Heroes
  • 3551 replies
  • Answer
  • October 8, 2024

@TWF Firefox seems to require a configuration .plist that doesn't necessarily use exactly the same key name as the preference setting. For example here is a profile to disable DNS over HTTPS:

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>EnterprisePoliciesEnabled</key> <true/> <key>DNSOverHTTPS__Enabled</key> <false/> <key>DNSOverHTTPS__Locked</key> <true/> </dict> </plist>

I don't know if the setting you're looking to set have the same issue, so you'll need to check on that.

The "EnterprisePoliciesEnabled" key set to "true" is required otherwise Firefox will ignore any settings you're trying to manage.


rayjd1650
Forum|alt.badge.img+5
  • New Contributor
  • 6 replies
  • October 8, 2024

iMazing Profile Editor has a Firefox payload, and the payload documentation points to a GitHub which has a .plist with all the settings.

https://github.com/mozilla/policy-templates/tree/master/mac


_Daley
Forum|alt.badge.img+6
  • Contributor
  • 22 replies
  • October 8, 2024

The attributes you've listed are different to the ones in their documentation. You can find their documentation here: https://mozilla.github.io/policy-templates/

For example, to disable telemetry it should be: 

<dict> <key>DisableTelemetry</key> <true/> </dict>

 This should also disable the health report, and the submission of data. 

I couldn't find a direct key for Experimentation, but it might be the FirefoxLabs key

I hope this helps! 


Forum|alt.badge.img+4
  • Author
  • Contributor
  • 13 replies
  • October 8, 2024
rayjd1650 wrote:

iMazing Profile Editor has a Firefox payload, and the payload documentation points to a GitHub which has a .plist with all the settings.

https://github.com/mozilla/policy-templates/tree/master/mac


This worked perfect for me. Thank you!


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings