<def-group>
  <definition class="compliance" id="firefox_preferences-lock_settings_obscure"  version="1">
    <metadata>
      <title>Prevent Users from Changing Firefox Configuration Settings</title>
      <affected family="unix">
        <platform>Mozilla Firefox</platform>
      </affected>
      <description>Locked settings prevents users from accessing about:config and
      changing the security settings set by the system administrator.</description>
      <reference source="galford" ref_id="20150424" ref_url="test_attestation"/>
    </metadata>
    <criteria>
      <criterion comment="Do not obscure locked file content with ROT-13" test_ref="test_firefox_preferences-obscure_value" />
    </criteria>
  </definition>

  <ind:textfilecontent54_test check="all" comment="Check for obscure_value" id="test_firefox_preferences-obscure_value" version="1">
    <ind:object object_ref="object_firefox_preferences-obscure_value" />
  </ind:textfilecontent54_test>
  <ind:textfilecontent54_object id="object_firefox_preferences-obscure_value" version="1">
    <ind:path operation="pattern match">^\/usr\/(|local\/)lib(|64)\/firefox\/defaults\/preferences</ind:path>
    <ind:filename operation="pattern match">^.*\.js$</ind:filename>
    <ind:pattern operation="pattern match">^pref\("general.config.obscure_value",[\s]+0\);$</ind:pattern>
    <ind:instance datatype="int">1</ind:instance>
  </ind:textfilecontent54_object>
</def-group>
