Fedora

SELinux

selinux

Encrypt User home folder

# yum install keyutils ecryptfs-utils pam_mount

# authconfig --enableecryptfs --updateall
# usermod -aG ecryptfs USER
# ecryptfs-migrate-home -u USER
# su - USER
$ ecryptfs-unwrap-passphrase ~/.ecryptfs/wrapped-passphrase (write this down for safe keeping)
$ ecryptfs-insert-wrapped-passphrase-into-keyring ~/.ecryptfs/wrapped-passphrase

List manually installed packages

yumdb search  command_line "*install*" | grep command_line | sort | uniq

yumdb search reason user

Configure automatic security updates

sudo yum --security upgrade
# Or, alternatively
sudo yum --security upgrade-minimal

1. Install yum-cron

sudo yum install yum-cron

1. Configure yum-cron

sudo vim /etc/yum/yum-cron.conf

update_cmd = security
apply_updates = yes

sudo systemctl status yum-cron
sudo systemctl enable yum-cron
# Or "restart" if already started
sudo systemctl start yum-cron

https://serversforhackers.com/video/automatic-security-updates-centos