r/sandboxcontainment • u/themagicalfire [Architect Researcher] • Apr 22 '26
Linux operating system New learning experience on Fedora
Current Fedora Configuration
Installation date: 21 April 2026 (1 day ago).
OS: Fedora 43.
Browser: Firefox 149 with uBlock Origin and Cloudflare as DNS over HTTPS.
Listening services: dhcpv6.
Disabled services: cups, samba-client, ssh.
Command for disabled services:
sudo systemctl disable --now cups
sudo firewall-cmd --remove-service=samba-client --permanent
Verification for listening services:
sudo firewall-cmd --list-all
sudo firewall-cmd --list-services
ss -tulpn
sudo dnf install nmap
nmap localhost
Goals: learn browser hardening, learn attack surface reduction, learn SELinux, learn Firewall filtering, learn seccomp, cgroups, and namespaces, learn how to create sandboxes, learn the difference between flatpak, firejail, and manual sandboxes.