Advanced Plus Security Victor M Fedora 44 KDE Configuration

Last updated
Jun 6, 2026
How it's used?
For work or educational use
Operating system
Linux
On-device encryption
Other full-disk drive encryption software
Log-in security
    • Hardware security key
    • Basic account password (insecure)
Security updates
Allow security updates
Update channels
Allow stable updates only
User Access Control
N/A - Linux / Mac / Other operating system
Smart App Control
N/A - Linux / Mac / Other operating system
Network firewall
Enabled
Real-time security
SELinux daemon & browser & user profiles
Systemd hardening
Firewall-cmd
Firewall security
Built-in Firewall for Mac/Linux
About custom security
SELinux daemon & browser & user profiles
Systemd hardening
Blacklisted unused network protocols
Firewall-cmd set to zone=drop
Seperate user_u confined account for daily use
Procedural security control forbids admin acc browser use.
Sudo command and logins require Yubikey
Browser policy foribds extensions
Browser policy disables javascript jit
Periodic malware scanners
clamav
Malware sample testing
I do not participate in malware testing
Environment for malware testing
n/a
Browser(s) and extensions
n/a
Secure DNS
quad9
Desktop VPN
ProtonVPN
Password manager
keepass
File and Photo backup
file copy
Subscriptions
    • Google One Premium 2TB
System recovery
Clonezilla
Risk factors
    • Browsing to popular websites
    • Working from home
    • Making audio/video calls
    • Buying from online stores, entering banks card details
Computer specs
Dell Latitude
What I'm looking for?

Looking for maximum feedback.

I have switched from Firefox to Brave because of Chromium's stronger sandbox reputation. But Claude said it also has the highest concentration of hackers targeting it, because, well it is Chrome with it's massive user base. But I know my red team was targeting Firefox. So this is a change of scenery for them. And I should have done the right things like restricting extensions to none via policy, and disabling the much hacked javascript jit. And Brave is said to follow Chrome updates very closely, unlike Chromium. Leaping from the pan into the fire.
 
Last edited:
  • Like
Reactions: lokamoka820
Asked ChatGPT about persistence techniques in Fedora and it spun out a 126 items list. A good part of it applies to the case whete the attacker gained root. ( I dearly hope not ) So I asked chat to generate a script to lock all the user mode persistence locations. And I applied it to my standard user account and it even backed up the existing and cleared out every location. Some ksmserverrc compllained that a spot was no longer writable when I logged in. But on the whole it is working. Good old chatgpt. The lockdown was simply preventing writing to user startup locations. ( the main thing was chattr +i, which makes that folder or file immutable). There are many folders and filies. ( remember Linux doesn't have a registry )
 
Last edited:
Don't under estimate what chatGPT can contribute. My red team says it is good defense.
 

You may also like...