fedora snapper, tuned, and selinux policies

active/os_fedora/fedora-workstation.md

@@ -19,6 +19,7 @@
   - [Display](#display)
     - [Scripted Display Modes](#scripted-display-modes)
   - [Fixing generic Wayland icons on task alt tab](#fixing-generic-wayland-icons-on-task-alt-tab)
+  - [Tuned Power Profiles](#tuned-power-profiles)
 
 ## Framework 16 Fixes
 
@@ -103,14 +104,21 @@ toolbox enter
 Set the default firewall to `drop`
 
 ```bash
-firewall-cmd --set-default-zone=drop
-firewall-cmd --reload
+sudo firewall-cmd --set-default-zone=drop
+sudo firewall-cmd --reload
 ```
 
 Allow KDE Connect via 1714-1764 tcp/udp
 
 ```bash
-firewall-cmd --add-port=1714-1764/udp --add-port=1714-1764/tcp --permanent
+# Set source address to allow connections
+sudo firewall-cmd \
+--zone=drop \
+--permanent \
+--add-port=1714-1764/udp \
+--add-port=1714-1764/tcp
+
+sudo firewall-cmd --reload
 ```
 
 You can check if the firewall is working via `nmap` from another machine
@@ -343,3 +351,11 @@ output.eDP-2.scale.1'
 
     Apply the new settings and close the application if it was open. The next
     time you open the application, it should show the correct icon.
+
+## Tuned Power Profiles
+
+Default profiles are in `/usr/lib/tuned/profiles`.
+
+Configuration file is in `/etc/tuned/ppd.conf`.
+
+Used `tuned-adm` CLI to interface with tuned.