[CentOS] FireFox and Plugins

Thu Nov 3 12:28:11 UTC 2016
Phil Wyett <philwyett.hemisphere at gmail.com>

On Wed, 2016-11-02 at 21:37 -0700, Alice Wonder wrote:
> While doing a browser fingerprinting survey, I was quite surprised to 
> see I actually have a FireFox plugin installed.
> The culprit is
> /usr/lib64/mozilla/plugins/librhythmbox-itms-detection-plugin.so
> It appears that whoever maintains the rhythmbox RPM has chosen not to 
> package the browser plugin separately like it probably should be. So if 
> I have the rhythmbox RPM installed, I have the plugin.
> This is rather worrisome because I can find no trace of the plugin in 
> the Mozilla preferences panel, so if it is there it is very well hidden 
> and if it really isn't there, it can't be disabled there.
> Is there some kind of blacklist file I can put in 
> /usr/lib64/mozilla/plugins/ or ~/.mozilla/plugins/ to specifically tell 
> FireFox not to load that plugin, or do I have to uninstall rhythmbox?
> Thank you for suggestions.
> PS does anyone actually have a real world use for an itms detection plugin?


It is possible to rebuild the package ( for CentOS 7) and disable this
plugin being built. Attached is a diff of the changes required.

In RHEL 7.3 rhythmbox is supposed to rebase.


Unsure if it has been pushed as yet, being 7.3 release day, not all info
is available. What this package does contain is to be found out.




Google+: https://goo.gl/CPjvNo
Blog: https://philwyett-hemi.blogspot.co.uk/
GitLab: https://gitlab.com/philwyett_hemi/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <http://lists.centos.org/pipermail/centos/attachments/20161103/5d6ba81f/attachment-0004.sig>