Personal tools
Sections
You are here: Home > IT Support insights > Firefox and Thunderbird updates with user rights
@CSC Blogs

The bloggers are experts working at CSC - IT Center for Science Ltd. The opinions published on the blogs are their own.

Readers can comment on published blog posts. CSC or its employees are not liable for the content produced by readers.

CSC has the right to remove reader comments if they are considered to be against good morals or against the law or offensive in any other way.

 
Document Actions

Firefox and Thunderbird updates with user rights

Submitted by Joni Nevalainen — posted on 2010-09-24 17:15 — last modified 2010-09-24 17:16
As network-using software, the web browser Mozilla Firefox and email suite Mozilla Thunderbird are especially fit to update themselves and keep vulnerability access time to a minimum. Here's how to configure them for self-updating with user-level rights.

Firefox needs only access to it's program directory - registry keys in HKLM can be left as they are. Thus, on a windows 2000/XP/Vista/7 system you just need to add directory modify permissions for the users group.

Example:

cd %ProgramFiles%
cacls "Mozilla Firefox" /e /t /g users:c

After this, when Firefox notices a new version available, it will ask the user to update now or later. When updating, the new install package will be downloaded and installed over the previous version.

As a side benefit, users can also install Firefox plugins after this procedure. The major benefit is less work for the system administrators that don't have to deploy the latest versions as they arrive, while keeping actively used systems secure.

The directory permission modification should be preferably done during initial install.

Example:

"Firefox Setup 3.5.5" -ms
cacls "%ProgramFiles%\Mozilla Firefox" /e /t /g users:c

If not, it can be done for example via a shutdown script that runs with system priviledges.

Example:

REM Firefox ja Thunderbird updatable with user rights    2007-06-18 - JoniN/CSC
REM Gets run only if the directory doesn't already have users:change permission
%SystemRoot%\system32\cacls.exe "%ProgramFiles%\Mozilla Firefox" | %SystemRoot%\system32\qgrep -z \Users:C
if ERRORLEVEL==1 IF EXIST "%ProgramFiles%\Mozilla Firefox" %SystemRoot%\system32\cacls "%ProgramFiles%\Mozilla Firefox" /E /T /G USERS:C
%SystemRoot%\system32\cacls.exe "%ProgramFiles%\Mozilla Thunderbird" | %SystemRoot%\system32\qgrep -z \Users:C
if ERRORLEVEL==1 IF EXIST "%ProgramFiles%\Mozilla Thunderbird" %SystemRoot%\system32\cacls "%ProgramFiles%\Mozilla Thunderbird" /E /T /G USERS:C
 

The utility qgrep can be copied to a folder of choice, here being %SystemRoot%\system32. It's a part of Windows resource kit 2003 package, which can be obtained here:

http://malektips.com/xp_dos_0011.html

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en

Good reasons to use Firefox: standards compliant, ensuring of website operability with linux and mobile users, memory-efficient, extendable.

http://www.getfirefox.com/

Good reasons to use Thunderbird: standards compliant, shows relevant info about email (including full headers when necessary). Ability to search and sort mail with wide criteria (header, body, subject, folder etc. search). Configurable for multiple accounts like Gmail / Aim mail. Transfer of mail to mailbox-backup files in local folders or between accounts. RSS reader and Usenet news client.

http://www.mozillamessaging.com/en-US/thunderbird/

Add comment

You can add a comment by filling out the form below. Plain text formatting.

(Required)
Please tell us your name.
(Required)
(Required)
(Required)
This field is used to prevent inappropriate use of this form by automated spam agents. Please input the string seen in the picture to enable processing of this form.
Captcha