documentation_complete: true

title: 'Set Firefox Configuration File Location'

description: "Specify the Firefox configuration file location by setting \n<tt>general.config.filename</tt> to the configuration (i.e. <tt>mozilla.cfg</tt>)\nfilename that contains the Firefox security preferences."

rationale: |-
    Locked settings prevents users from accessing about:config and changing
    the security settings set by the system administrator.

severity: medium

identifiers:
    cce: ""

references:
    disa: ""
    nist: ECSC-1
    stigid: DTBF070

ocil_clause: 'users can change mandatory settings'

ocil: |-
    To verify that configuration filename is set, run the following command:
    <pre>$ grep 'filename' <i>FIREFOX_INSTALL_DIR</i>/defaults/preferences/*.js</pre>
    The output should return something similar to:
    <pre>pref("general.config.filename", "mozilla.cfg");</pre>
