I have installed fedora 24 desktop mean mate , and tool : scap-workbench, chkrootkit,rkhunter,aide, iptables rule.
But i found this link https://infrastructure.fedoraproject...rd-Sysctl.html and i dont know is good or no for fedora24 desktop ? I want to protect against MITM and blackhat tools Intruder. can someone show me what tool to use and what conf to use, or to leave default ? I think about dr.web antivirus, but drweb is hard and can slow down my old computer.

Or to leave everything default in fedora24 desktop ?

Security is NOT installing a "program"

it is a PROCESS

by default fedora is rather "secure"

leave SE set to enforcing

unless you NEED!!!!!! "sudo" leave it disabled

start with the fedora documentation
https://docs.fedoraproject.org/en-US...Release_Notes/
and
https://docs.fedoraproject.org/en-US...ide/index.html

and what is the use ???
home ?
nsa contractor ?
kiosk ?

Pardon my newbieness, but what does one need sudo for and how is it disabled?

fedora , rhel and a few others do not use sudo by default
so it is not set up by default

Novation, check out man sudo, it describes sudo rather well. Another document you may find useful is the SELinux User's and Administrator's Guide. One of the main things to lookout for is when setting up new services such as mail, ftp, web server, etc. If you don't configure them securely some people will take advantage of the opening.

I would agree with John VV that Fedora is rather secure by default. Technically sudo is available for use in Fedora. The thing is that no one has access to run sudo unless you grant it. For example, if you add GID wheel to a user they will be able to use it and execute any command they feel like. During a Fedora install, if you create a user with administrator rights this is exactly what happens.