Enterprise deployment with dual whitelist configuration?

Ask for help about NoScript, no registration needed to post
KahFau
Posts: 1
Joined: Mon Feb 21, 2011 2:41 pm

Enterprise deployment with dual whitelist configuration?

Post by KahFau »

Hello,

I don't know whether my post is a configuration or feature request so I put it in the support forum. Feel free to move it if I was wrong...

We have the plan to deploy Firefox in our corporate environment (about 10,000 clients) with embedded NoScript. The normal user should not be able to remove the addon, so I configured it as a global extension (put it to %ProgramFiles%\Mozilla Firefox\NoScript and added an entry into the registry key HKLM\Software\Mozilla\Firefox\Extensions). The installation works great: every user can disable NoScript within his profile if he do not want to use it, but removal of the extension is not possible.

Now for the tricky part -- the dual whitelist configuration. Our main goal is to maintain one whitelist which is unique on every client. This list is upated once in a month. On the other hand the user should have the ability to add additional sites to a second list only valid within his userprofile. I tried to save the "global" list within the byte-shifted file "mozilla.cfg" but this removed the possibility even of temporary allowed sites.

Any chance to implement this feature into the extension?

Regards,
KahFau
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b11) Gecko/20100101 Firefox/4.0b11
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: Enterprise deployment with dual whitelist configuration?

Post by Thrawn »

Bump due to potential uptake.
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (Linux; U; Android 2.2.1; en-gb; GT-S5570 Build/FROYO) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
Tom T.
Field Marshal
Posts: 3620
Joined: Fri Mar 20, 2009 6:58 am

Re: Enterprise deployment with dual whitelist configuration?

Post by Tom T. »

Thrawn wrote:Bump due to potential uptake.
From more than 15 months ago, on Fx 4.0b, and a waay older NS?
Guess it's OK, but it seems that OP would have asked again at some point if still interested.
Or another corp user with the same question.

(I too sometimes look for stuff that falls through the cracks, but usually only a month or two, unless globally useful.)

btw, if I were a sysadmin and decided NS was to be used, I'd not allow individual users to disable it; I'd train them how to use it.
I'd *certainly* not give them whitelist privileges of their own. Sure way to get the corp LAN infected, and besides, why are they browsing to non-corporate-business-related sites on company time? IMHO. YMMV.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:12.0) Gecko/20100101 Firefox/12.0
Post Reply