Bug 470952

Summary: Safe mode will not reset "master password" to its default setting.
Product: Red Hat Enterprise Linux 5 Reporter: Yolkfull Chow <yzhou>
Component: firefoxAssignee: Gecko Maintainer <gecko-bugs-nobody>
Status: CLOSED NOTABUG QA Contact: desktop-bugs <desktop-bugs>
Severity: medium Docs Contact:
Priority: medium    
Version: 5.2CC: desktop-bugs
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-11-11 10:02:04 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Yolkfull Chow 2008-11-11 02:56:02 UTC
Description of problem:
By default, "master password" is not checked. If we set a master password, we could say, we have made a change against default setting. And start firefox in safe mode, check option "Reset all user preferences to Firefox defaults" and click "Make Changes and Restart" then, any changes we have made to Firefox's options should be set back to their default settings according to "mozilla support", BUT it not.

Version-Release number of selected component (if applicable):
firefox-3.0.4-1

How reproducible:
Everytime

Steps to Reproduce:
1. set a master password and let firefox save some passwords
2. start firefox in safe-mode and check option "Reset all user preferences to Firefox defaults", click "Make Changes and Restart"
3. check master password
  
Actual results:


Expected results:
master password should be removed and deselected according to "Mozilla Support": http://support.mozilla.com/en-US/kb/Safe+Mode

Additional info:

Comment 1 Matěj Cepl 2008-11-11 10:02:04 UTC
(In reply to comment #0)
> master password should be removed and deselected according to "Mozilla
> Support": http://support.mozilla.com/en-US/kb/Safe+Mode

a) I don't see anything on that page saying that master password is reset -- they are pretty specific to which settings are reset and there is no master password resetting.
b) It seems to me that from security point of view resetting of the master password seems like making a wrong move to make.

Closing this as NOTABUG, and if you think that this should be fixed, please, file a bug in the upstream bugzilla for this.

Comment 2 Yolkfull Chow 2008-11-11 10:24:22 UTC
"Reset all user preferences to Firefox defaults: If you select this box and then click Make Changes and Restart then __any changes you have made to Firefox's options will be set back to their default settings__. "

Above is from mozilla support page(http://support.mozilla.com/en-US/kb/Safe+Mode). 
Agree with you from security point to review this problem. But at least,user haven't been told anything about this when start with safe-mode.
Maybe we could file one in the upstream.
Anyway, thanks.