You're welcome. A word of caution, changes in PAM can break desktops. I would certainly research working examples that people have implemented on the same ver

You're welcome. A word of caution, changes in PAM can break desktops. I would certainly research working examples that people have implemented on the same version of Fedora as you to avoid headaches. Or at least ensure you can boot into single user mode or boot off a RAM diskless distro to rescue your system. I would also back up the /etc/pam.d directory somewhere that is easy to find and maybe even do a git commit in that backup directory so you can walk backwards through your changes in case something breaks. rsnapshot is also a good way to preserve backups and snapshots of directories. Some of the PAM modules have corresponding commands that can rewrite the configuration files and reduce the risk of breaking something but not all modules have tooling in place yet probably due to a lack of popularity/demand. authselect, authconfig, etc... Another Firefox addon I neglected to mention is Block Website [1]. It can be configured in a reverse mode, only allowing websites that have been explicitly permitted. A password can be used on-demand to add new sites. IPTables can also be used to enable or block access to anything (by name single shot lookup, IP, port, etc...) [2] Using domain names in IPtables can be problematic if the site's IP changes before you restart IPTables or if a CDN is in the path with shared IP's and SNI TLS. [1] - https://addons.mozilla.org/en-US/firefox/addon/block-website/ https://addons.mozilla.org/en-US/firefox/addon/block-website... [2] - https://ipset.netfilter.org/iptables-extensions.man.html https://ipset.netfilter.org/iptables-extensions.man.html # search for the "time" module.