Re: Firefox extension and themes install
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
En/La Freddy Freeloader ha escrit, a 14/05/05 17:41:
| Jonathan Kaye wrote:
|
| En/La Freddy Freeloader ha escrit, a 14/05/05 16:30:
| | Is anyone else running across the following problem?
| |
| | Ever since Firefox changed the install routine for themes and
| extensions
| | due to a vulnerability I've been unable to install any themes or
| | extensions as a regular user. I can install them if I su to root and
| | start Firefox from the bash shell or if I run Firefox as root, but then
| | any extensions or themes installed don't apply to my regular user
| | profile. I've tried playine around with copying the entire
| | .mozilla/firefox directory from /root and changing owner and group
| | permissions on it so my user account has access but that only creates a
| | non-usable browser so I have to uninstall and reinstall again.
| | What happens is that the install routines for extensions/themes
| begin as
| | normal but fail silently. I can find no errors in any logs, and the
| | extensions directory remains empty. I'm assuming this is because
| | something has changed in the Firefox is using file permissions since
| the
| | extensions are installed in /usr/lib/mozilla-firefox and a regular user
| | doesn't have write permissions there.
| | I went to the Firefox support forums and one of the moderators told me
| | that this problem would be fixed in the 1.0.4 release so when the 1.0.4
| | package was placed in unstable I installed it from there by downloading
| | the package and using dpkg to install it. (I am running Sarge.)
| | I'm getting no response worth mentioning from the Firefox people so I
| | thought I'd ask here if anyone else is seeing this too and what your
| | workaround was.
| |
| Hi Freddy,
| I'm running Sarge (2.6.8) and Firefox 1.0.4. I have the following
| extensions: Launchy, DictionarySearch, Linky and Adblock.
| AFAIK they all are installed in
| ~/.mozilla/firefox/default.mq3/extensions/
| I always run Firefox as a normal user and never as root. I never touch
| /usr/lib/mozilla-firefox and so permission issues don't arise.
| Cheers,
| Jonathan
|>
|>
| I beg to differ with you that nothing is written in
| /usr/lib/mozilla-firefox during the install of extensions. I am pasting
| the output from ls below.
My mistake, Freddy. I should have said that nothing is written in MY
/usr/lib/mozilla-firefox. In fact that folder doesn't even exist on my
system. I should mention that I don't install firefox as a debian
package but download directly from the firefox site. I wind up with a
/tmp/firefox-installer directory which I copy to the /opt folder, change
its name to /opt/firefox (after renaming the previous version "firefox.old".
| Job:/usr/lib/mozilla-firefox# ls
| chrome icons libsoftokn3.so res
| components libmozjs.so libssl3.so
| run-mozilla.sh
| components.ini libnspr4.so libxpcom_compat.so
| searchplugins
| defaults libnss3.so libxpcom.so xpcshell
| defaults.ini libnssckbi.so libxpistub.so
xpicleanup
| extensions libplc4.so mozilla-firefox-xremote-client xpidl
| firefox libplds4.so plugins xpt_dump
| firefox-bin libsmime3.so regchrome xpt_link
| greprefs libsoftokn3.chk regxpcom
| Job:/usr/lib/mozilla-firefox# cd extensions
| Job:/usr/lib/mozilla-firefox/extensions# ls
| {972ce4c6-7e08-4474-a285-3208198ce6fd} installed-extensions-processed.txt
| Extensions.rdf
| Job:/usr/lib/mozilla-firefox/extensions# cd
| {972ce4c6-7e08-4474-a285-3208198ce6fd}
|
Job:/usr/lib/mozilla-firefox/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}#
| ls
| chrome install.rdf uninstall
|
Job:/usr/lib/mozilla-firefox/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}#
Sorry, but the only thing I have in /opt/firefox/extensions is something
related to some theme. All the extensions that I mentioned are found
ONLY in my home folder as you can see here:
Attila:/home/jdkaye# locate linky.js
/home/jdkaye/.mozilla/firefox/default.mq3/extensions/{24898804-7da3-4355-9e8d-065f3ee79ccc}/defaults/preferences/linky.js
/home/jdkaye/.mozilla/firefox/default.mq3/extensions/{24898804-7da3-4355-9e8d-065f3ee79ccc}/linky.js
Attila:/home/jdkaye# locate launchy.js
/home/jdkaye/.mozilla/firefox/default.mq3/extensions/{4becdb7e-dc3c-48e2-b1e8-3a4ad647c9bb}/defaults/preferences/launchy.js
/home/jdkaye/.mozilla/firefox/default.mq3/extensions/{4becdb7e-dc3c-48e2-b1e8-3a4ad647c9bb}/launchy.js
/home/jdkaye/.thunderbird/zp8wdk07.default/extensions/{4becdb7e-dc3c-48e2-b1e8-3a4ad647c9bb}/defaults/preferences/launchy.js
/home/jdkaye/.thunderbird/zp8wdk07.default/extensions/{4becdb7e-dc3c-48e2-b1e8-3a4ad647c9bb}/launchy.js
Attila:/home/jdkaye# locate dictionarysearch
/home/jdkaye/.mozilla/firefox/default.mq3/extensions/{a0faa0a4-f1a7-4098-9a74-21efc3a92372}/chrome/dictionarysearch.jar
/home/jdkaye/.thunderbird/zp8wdk07.default/extensions/{a0faa0a4-f1a7-4098-9a74-21efc3a92372}/chrome/dictionarysearch.jar
| As you can plainly see there is data written to
| /usr/lib/mozilla-firefox/extensions when extensions/themes are installed.
| I'm guessing that you have had your extensions installed for a long
| time. I'd lay pretty good odds that you haven't tried installing any
| new extensions in the past few days either.
You'd lose. Keep your money ;-) . FF 1.0.4 has a cool new alert system
for extension upgrades (themes also BTW) and I've upgrade a couple of
them since I installed 1.0.4 and, as you know, 1.0.4 is not that old.
I'm also guessing, since I
| have no idea how Firefox is now installing things, that the components
| for the extensions themselves are now being installed outside the /home
| directory so that a malicious site won't be able to compromise the
| computer through a standard user account. Changing the place where the
| executable files are installed to a directory where a standard user
| doesn't have write permissions is an easy security fix, but one that has
| some major consequences.
To me it makes sense to keep the theme, extension, plugin stuff in the
user's home directory since not every user would want to use the same
extensions, themes etc. Anyway, remember that there's more than one way
to install Firefox and as I said I don't even have a
/usr/lib/mozilla-firefox folder.
Cheers,
Jonathan
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
iD8DBQFChugg64+f0AXUe+4RAu44AJ9udl3srbapvV9q+sVQpOYpBUESDQCghEjH
/uZuku7WR0PIV/ugkrJIxJw=
=Sb10
-----END PGP SIGNATURE-----
Reply to: