shell-things/etc/opt/chromium/policies/managed
2024-05-12 18:34:10 +03:00
..
.editorconfig chromium: declare more things as .badidea 2024-04-25 14:01:54 +03:00
.gitattributes chromium: declare more things as .badidea 2024-04-25 14:01:54 +03:00
.gitignore chromium policy: fix doh-cloudflare-secure.json name inconsistency 2024-05-09 17:11:17 +03:00
amber-theme-colour.json.sample chromium/managed: add amber-theme-colour.json.sample 2024-05-12 18:34:10 +03:00
aminda-extensions.json {firefox,chromium}: add Plasma Integration mainly for family 2024-05-12 15:49:12 +03:00
black-theme-colour.json.sample chromium: rename black-theme-colour.json -> black-theme-colour.json.sample to stop me accidentally applying it 2024-05-11 20:36:08 +03:00
brave-shields-disabled.json {firefox,chromium,edge}: add Ecosia 2024-05-11 16:16:12 +03:00
disable-brave-ipfs.json chromium: add brave IPFS disabling policy 2024-04-22 10:03:53 +03:00
disable-brave-rewards-wallet.json chromium: move brave feature disabling from recommended to managed for actual effect 2024-04-16 07:11:55 +03:00
disable-brave-tor.json chromium: move brave feature disabling from recommended to managed for actual effect 2024-04-16 07:11:55 +03:00
disable-brave-vpn.json brave: use boolean for disabling vpn 2024-04-10 11:16:55 +03:00
disable-floc.json chromium: ExtensionManifestV2Availability expects 2, not true 2024-05-11 19:49:04 +03:00
disable-incognito.json.badidea chromium: declare more things as .badidea 2024-04-25 14:01:54 +03:00
dns-over-https.json.badidea chromium: add dns-over-https.json.badidea and declare it as a bad idea 2024-04-25 13:57:01 +03:00
doh-adguard-family.json chromium: add doh-adguard policies 2024-05-12 15:30:52 +03:00
doh-adguard-unfiltered.json chromium: add doh-adguard policies 2024-05-12 15:30:52 +03:00
doh-adguard.json chromium: add doh-adguard policies 2024-05-12 15:30:52 +03:00
doh-cloudflare-secure.json chromium policy: fix doh-cloudflare-secure.json name inconsistency 2024-05-09 17:11:17 +03:00
doh-cloudflare-security.json chromium policy: fix doh-cloudflare-secure.json name inconsistency 2024-05-09 17:11:17 +03:00
doh-disabled.json chromium/policies: add doh-{disabled,google}.json 2024-04-27 16:18:40 +03:00
doh-dns0-kids.json chromium: allow DoH downgrade to at least work. Breaks ECH :( 2024-04-25 08:15:28 +03:00
doh-dns0-open.json chromium: allow DoH downgrade to at least work. Breaks ECH :( 2024-04-25 08:15:28 +03:00
doh-dns0-zero.json chromium: allow DoH downgrade to at least work. Breaks ECH :( 2024-04-25 08:15:28 +03:00
doh-dns0.json chromium: allow DoH downgrade to at least work. Breaks ECH :( 2024-04-25 08:15:28 +03:00
doh-google.json chromium/policies: add doh-{disabled,google}.json 2024-04-27 16:18:40 +03:00
doh-mullvad-base.json chromium: allow DoH downgrade to at least work. Breaks ECH :( 2024-04-25 08:15:28 +03:00
doh-quad9-ecs.json chromium: allow DoH downgrade to at least work. Breaks ECH :( 2024-04-25 08:15:28 +03:00
doh-quad9-insecure-ecs.json.badidea chromium: declare more things as .badidea 2024-04-25 14:01:54 +03:00
doh-quad9-insecure.json.badidea chromium: declare more things as .badidea 2024-04-25 14:01:54 +03:00
doh-quad9.json chromium: allow DoH downgrade to at least work. Breaks ECH :( 2024-04-25 08:15:28 +03:00
doh-unlocked-unset.json chromium: merge doh-forced to the doh files due to it being required anyway, update documentation, rename doh-allowed → doh-unlocked-unset 2024-04-21 14:00:39 +03:00
edge-appsfavorites.json chromium/policies/managed: add non-functional Edge policies 2024-05-07 11:23:30 +03:00
edge-newtabapps.json chromium/policies/managed: add non-functional Edge policies 2024-05-07 11:23:30 +03:00
edge-screenshots.json chromium/policies/managed: add non-functional Edge policies 2024-05-07 11:23:30 +03:00
enable-chromecast.json chromium: allow manifestv2, enable chromecast, safebrowsing, passwordleakdetection, efficiencymode, suggest disabling bookmarks bar and document previously forgotten policies 2024-05-11 19:44:16 +03:00
enable-ech-ocsp.json chromium/enable-ech-ocsp.json: remove not strictly releated policies 2024-04-20 07:47:31 +03:00
enable-labs.json chromium/managed: add enable-labs.json 2024-04-15 21:08:56 +03:00
enable-passwordleakdetection.json chromium: allow manifestv2, enable chromecast, safebrowsing, passwordleakdetection, efficiencymode, suggest disabling bookmarks bar and document previously forgotten policies 2024-05-11 19:44:16 +03:00
enable-tab-suspend.json chromium: allow manifestv2, enable chromecast, safebrowsing, passwordleakdetection, efficiencymode, suggest disabling bookmarks bar and document previously forgotten policies 2024-05-11 19:44:16 +03:00
fix-edge-search.json chromium: move edge policy from recommended searches to managed/fix-edge-search.json 2024-03-28 18:53:15 +02:00
force-incognito.json.badidea chromium: declare more things as .badidea 2024-04-25 14:01:54 +03:00
https-everywhere.json chrome policies: force_enable HttpsOnlyMode 2024-01-31 14:12:21 +02:00
README.md chromium: move safe browsings from managed to recommended 2024-05-12 18:27:18 +03:00

Chromium policies

aminda-extensions.json

As I cannot separate the keys to multiple files I am forced to keep them in one and separate by what the file does, aminda-extensions.json is unlikely to overlap with someone else.

Changing normal_installed to force_installed would also prevent uninstallation.

This does contain some bloat or something not necessary in all situations or even overlapping extensions, but there is an important side goal of teaching users to disable extraneous extensions they dont need (unless I decide they do need something and thus its force_installed.

Silk - Privacy Pass Client for the browser

  • ajhmfdgkijocedmfjonnpjfojldioehi

Silk or Privacy Pass has a chance of decreasing the amount of captchas especially from Cloudflare when “suspicious” traffic is detected.

To intentionally trigger it and what should be allowed in NoScript:

Plasma Integration

  • cimiefiiaegbelhefglklhhakcgmhkai

Does a lot of small things on KDE Plasma which my family uses (and me too, when I am not on Sway). For example media player integration to Plasma, downloads indicator/control, KDE Connect, alt-f2, etc.

uBlock Origin

  • cjpalhdlnbpafiamejdnhcphjbkeiagm

Blocked for Ad Nauseam

HTTP Indicator

  • hgcomhbcacfkpffiphlmnlhpppcjgmbl

Displays whether a web page was loaded over HTTP/2 or HTTP/3 etc.

Fedora User Agent

  • hojggiaghnldpcknpbciehjcaoafceil

Communicates websites that Ubuntu isnt the only Linux distribution and makes some offer rpm packages directly.

IPvFooBar

  • iimpkhokkfekbpmoamlmcndclohnehhk

AdNauseam

  • mlojlfildnehdpnlmpkeiiglhhkofhpb

Complementing PrivacyBadger with an adblocker so first profile runs have at least something to block Malvertising now that I no longer enable NoScript out of the box.

uBlock Origin

  • odfafepnkmbhccpbejgmiehpchacaeak

yes, its the second time ,one is edge, one is chrome

Bitwarden

  • nngceckbapebfimnlniiiahkandclblb

The password manager of my choice.

Privacy Badger

  • pkehgijcmpdhfbdbbnkijodmdjhbjlgp

Configured to learn locally and also in incognito as opposed to only relying on vendor list. Also not display the “Welcome to Privacy Badger screen”.

See also:

black-theme-colour.json.sample

Sets the theme colour as black. This is managed instead of recommended, because even the recommended policy seems to block theme changing.

.sample suffix is there so maybe I will stop applying this policy and thus disabling GTK/Qt themes.

brave-shields-disabled.json

Allowlist for sites where I think Brave Shields may be breaking things. Similar is also in aminda-extensions.json for Privacy Badger.

disable-brave-rewards-wallet.json

Disables Brave rewards and wallet.

disable-brave-tor.json

Disables Tor in Brave as I recommend using Tor Browser instead.

disable-brave-vpn.json

Disables Brave VPN, which is the most annoying feature that has group policy that I can see.

disable-floc.json

Disables floc or ad topics that are against privacy. Additionally allows Manifest v2 extensions (as v3 is kind of floc too).

disable-incognito.json.badidea

Disables incognito mode. I dont recommend this.

doh-cloudflare-secure.json

Sets Cloudflare with malware protection as the forced DNS-over-HTTPS server.

doh-unlocked-unset.json

If no DNS over HTTPS policy is used, this unlocks the setting. Enabling managed policies disable it by default.

My other doh-*.json set this as well, because secure doesnt allow downgrade to system resolver and Chromium seems somewhat unreliable with it often reporting DNS_PROBE_POSSIBLE and while this occassionally disables ECH, it works and my system resolvers are encrypted. I hope they will implement ECH with system resolver soon to fix this.

doh-dns0.json

Simply forces DNS-over-HTTPS with DNS0.eu.

doh-mullvad-base.json

Forces DNS-over-HTTPS with Mullvad Base, which features ad, malware & tracker blocking.

doh-quad9-ecs.json

Forces DNS over HTTPS with Quad9 ECS enabled threat-blocking server and also contains their alternative port.

doh-quad9-insecure-ecs.json.badidea

Forces DNS over HTTPS with Quad9 ECS enabled unfiltered server and also contains their alternative port. No DNSSEC either.

doh-quad9-insecure.json.badidea

Forces DNS over HTTPS with Quad9 unfiltered server and also contains their alternative port. No DNSSEC either.

doh-quad9.json

Forces DNS over HTTPS with Quad9 threat-blocking server and also contains their alternative port.

doh-unlocked-unset.json

Allows configuring DoH even with managed policies present (unless another DoH rule is in force) since enabling any managed policy will otherwise gray out the option.

edge-appsfavorites.json

Edge apps in favorites bar.

edge-newtabapps.json

Should enable apps in new tab page, although I am not seeing it.

edge-screenshots.json

Explicitly enables screenshotting-

enable-chromecast.json

Explicitly enables Chromecast support.

enable-ech-ocsp.json

Enables encrypted client hello (ECH) and Online Certificate Status Protocol (OCSP)/Certificate Revocation List (CRL) checks.

However ECH requires "DnsOverHttpsMode": "secure" which will break things (and thus my files dont enable it), or it will occassionally get disabled (I hope they implement it with system resolver soon).

enable-labs.json

Enables the beaker button “Experiments” for easier management than about:flags.

enable-passwordleakdetection.json

Warns about password reuse, although that may only be with Google account.

enable-tab-suspend.json

Enables the efficiency mode which suspends background tabs.

fix-edge-search.json

Tells Microsoft Edge to redirect queries from new tab search box to URL bar effectively forcing it to respect user configured search engine instead of stealthily sending those queries to Bing.

force-incognito.json.badidea

Forces incognito mode. I dont recommend this.

https-everywhere.json

Enforces https and attempts to upgrade http to https.

README.md

You are reading this file, are you not?