How to use ExtensionSettings option

[Mithrandir918]

Hi! I'm sorry for the trouble, but I do not quite understand how to use this. Specifically, I'm trying to use the ExtensionSettings command to prevent me from uninstalling some extensions. Could someone please try and walk me through this? Thank you!

[mkaply]

What extensions are you wanting to do this with?

[Mithrandir918]

I’ll link it. Thanks for helping me out! https://addons.mozilla.org/en-US/firefox/addon/blocksite/ Sent with a Spark

…

On Dec 6, 2021, 9:37 AM -0500, Michael Kaply ***@***.***>, wrote: What extensions are you wanting to do this with? — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

[mkaply]

I'll take you through the steps I do. So the first thing we need is the ID of the extension. There are a few ways to do that.

1. Install the extension and go to about:debugging
2. Unzip the extension and look at manifest.json (doesn't always work).
3. Install the extension I specifically built to do this - https://github.com/mkaply/queryamoid/releases

Using my tool I got the ID:

{dd3d7613-0246-469d-bc65-2a3cc1668adc}

and the download URL:

https://addons.mozilla.org/firefox/downloads/latest/blocksite/latest.xpi

So what you're looking for is "force_installed" that says "install this for the user and don't let them uninstall.

So you would set ExtensionSettings to:

{
  "{dd3d7613-0246-469d-bc65-2a3cc1668adc}": {
    "installation_mode": "force_installed",
    "install_url": "https://addons.mozilla.org/firefox/downloads/latest/blocksite/latest.xpi"
  }
}

[Mithrandir918]

Awesome. Where in the firefox installation do I put this file?

[Mithrandir918]

I got it into the distribution folder (which is in FireFox's package contents), but it's still not doing anything. The policies.json file is in the distribution folder. However, when I click on it, firefox says "SyntaxError: JSON.parse: expected property name or '}' at line 1 column 2 of the JSON data". Not being a coder, I'm not sure what that means. Do I need to make a new installation of firefox? If it helps at all, I'm on Mac. If you could help me, I'd really appreciate it. Thank you!

[mkaply]

I would recommend linting your file at jsonlint.com. It should be a matter of putting this file called policies.json in the distribution directory:

{
  "policies": {
    "ExtensionSettings": {
      "{dd3d7613-0246-469d-bc65-2a3cc1668adc}": {
        "installation_mode": "force_installed",
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/blocksite/latest.xpi"
      }
    }
  }
}

[Mithrandir918]

I did all of that. When I click on the file in the distribution folder, it does not come up with an error message like it did before. However, I can still remove the extension. I really appreciate the help.

[mkaply]

IS the policy active when you go to about:policies?

[Mithrandir918]

It is not.

[mkaply]

OK, so it sounds like it's not reading the file. Can you post the policies.json? What platform are you on?

[mkaply]

Oh mac :). OK the location is different.

Are you putting it in

Firefox.app/Contents/Resources/distribution

[Mithrandir918]

Yes. I created the distribution folder though because it wasn’t there before. Is that the problem? Sent with a Spark

…

On Dec 7, 2021, 11:22 AM -0500, Michael Kaply ***@***.***>, wrote: Oh mac :). OK the location is different. Are you putting it in Firefox.app/Contents/Resources/distribution — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

[mkaply]

Yes. I created the distribution folder though because it wasn’t there before. Is that the problem?

Nope, that should work. I'm at a loss. Can you post a screenshot of your about:policies?

[Mithrandir918]

Is this what you're looking for?

[mkaply]

Yes.

so when you click on Errors on the left, what does it say?

[Mithrandir918]

Error parsing JSON file: SyntaxError: JSON.parse: expected property name or '}' at line 1 column 2 of the JSON data

I think that might be an old log though from when I was trying to do it myself.

[mkaply]

So there's definitely still an error in the policies.json. Can you post it here?

[Mithrandir918]

Error parsing JSON file: SyntaxError: JSON.parse: expected property name or '}' at line 1 column 2 of the JSON data I think that have been from me messing with it beforehand before I asked you to help. Sent with a Spark

…

On Dec 7, 2021, 11:39 AM -0500, Michael Kaply ***@***.***>, wrote: Yes. so when you click on Errors on the left, what does it say? — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

[Mithrandir918]

Yep. I can’t post a .json, so I’ll send a screenshot Sent with a Spark

…

On Dec 7, 2021, 11:44 AM -0500, Michael Kaply ***@***.***>, wrote: So there's definitely still an error in the policies.json. Can you post it here? — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

[mkaply]

Screenshot didn't make it. If you want to email it to me - mkaply at mozilla dot com

[Mithrandir918]

I'll try again here.

[mkaply]

I feel like it's reading a different policies.json file than that one because that one is definitely correct.

[Mithrandir918]

Huh. How would I check for that? There are no other files in the distributions folder.

[Mithrandir918]

Should I delete and reinstall Firefox with the folder in there?

[mkaply]

Can you try just deleting policies.json and see what you get in about:policies?

I just want to make sure it's that file being used.

[Mithrandir918]

Sorry, had to go. It says "The Enterprise Policies service is inactive."

[mkaply]

Is there still an error tab?

[Mithrandir918]

Yes, the same message is still there

[mkaply]

OK, that tells me it's reading a different policies.json. Can you go to

about:support and tell me the value for Application Binary?

[Mithrandir918]

I'm not exactly sure what you mean, but it says this: /Applications/Firefox.app/Contents/MacOS/firefox

[Mithrandir918]

I see that file. Should I delete it?

[mkaply]

Can you check if there is a policies.json in

/Applications/Firefox.app/Contents/Resources/distribution?

[Mithrandir918]

There is not.

[mkaply]

I'm at a loss here. Would you be willing to have a video call/screen share where we try to diagnose?

[Mithrandir918]

Thank you for offering, but I don’t feel comfortable doing that. Thank you for your help though! I really appreciate the time you’ve put in helping me. Sent with a Spark

…

On Dec 8, 2021, 11:26 AM -0500, Michael Kaply ***@***.***>, wrote: I'm at a loss here. Would you be willing to have a video call/screen share where we try to diagnose? — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

[mkaply]

Totally understand. My only other suggestion is to go to about:config and add a preference called

browser.policies.loglevel

and set the value to a string with "debug"

Then the JS console ( Cmd + Shift + J) might give us some extra info.

The other thing I was wondering is if you somehow have a configuration profile loaded (separate from policies.json)

[Mithrandir918]

How do I set the string value to "debug"? I'm not seeing the option there.

[Mithrandir918]

I’ll try to add the preference. Where would I look for a different config file outside of policies.json? Sent with a Spark

…

On Dec 8, 2021, 11:52 AM -0500, Michael Kaply ***@***.***>, wrote: Totally understand. My only other suggestion is to go to about:config and add a preference called browser.policies.loglevel and set the value to a string with "debug" Then the JS console ( Cmd + Shift + J) might give us some extra info. The other thing I was wondering is if you somehow have a configuration profile loaded (separate from policies.json) — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

[mkaply]

Go to about:config

Type browser.policies.loglevel in the field.

Click the string radio button

Click the Plus sign

type the word debug and press enter.

As far as having a configuration profile applied, search your mac using the question mark in the upper right for "Profiles" You should get a hit that is in system preferences. It's a checkbox in a star. Open that up and see if there is anything in it (it will be blank if you have nothing applied)

[Mithrandir918]

There is nothing in profiles. I set up the browser.policies.loglevel thing. What should I look for in the debug screen?

[mkaply]

When you first open Firefox, you'll see the same JSON error in the console, but you should see some extra text before that (maybe). Basically a screenshot of the JS console right after starting Firefox.

Unfortunately this won't have everything we need, but I'm going to add some better debug info just in case this ever happens again.

[Mithrandir918]

Got it. So, just to clarify, I should restart Firefox and send a screenshot of the debug screen right after booting it?

[mkaply]

Exactly.

[Mithrandir918]

[mkaply]

Yeah, nothing that would help. I'm putting a change in Firefox 96 that will help us debug this.

[Mithrandir918]

Thanks!

[Mithrandir918]

Do you think the issue will be fixed when Firefox 96 is released?

[mkaply]

I don't think the issue will be fixed, but I'll make sure there's better info so we can debug the problem.

96 is in a month.

[Mithrandir918]

Ok. Thanks for helping me! Sent with a Spark

…

On Dec 8, 2021, 4:08 PM -0500, Michael Kaply ***@***.***>, wrote: I don't think the issue will be fixed, but I'll make sure there's better info so we can debug the problem. 96 is in a month. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

[mkaply]

So just to followup what I'm doing here. I'm putting a patch into firefox 96 that shows the path and content of policies.json.

So when Firefox 96 is released, we can revisit and figure out where the file is being read on your machine. So I'll reping you beginning of january.

[Mithrandir918]

Awesome! Send me a message when that’s up please! Sent with a Spark

…

On Dec 14, 2021, 11:13 AM -0500, Michael Kaply ***@***.***>, wrote: So just to followup what I'm doing here. I'm putting a patch into firefox 96 that shows the path and content of policies.json. So when Firefox 96 is released, we can revisit and figure out where the file is being read on your machine. So I'll reping you beginning of january. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

[angela-d]

@Mithrandir918 if you manage your Macs with MDM, like JAMF or Filewave, you can simply deploy a mobileconfig policy to them.
I have a copy of what I use in my notes, maybe it'll help: https://github.com/angela-d/brain-dump/tree/master/sysadmin/macos/mdm-profiles

[Mithrandir918]

And I got that working! Thanks! Sent with a Spark

…

On Dec 15, 2021, 11:03 PM -0500, Angela ***@***.***>, wrote: @Mithrandir918 if you manage your Macs with MDM, like JAMF or Filewave, you can simply deploy a mobileconfig policy to them. I have a copy of what I use in my notes, maybe it'll help: https://github.com/angela-d/brain-dump/tree/master/sysadmin/macos/mdm-profiles — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.