CyberPatriot is the National Youth Cyber Education Program created to help direct students toward careers in cybersecurity. This repository has Ansible Playbooks to build a Fedora test image for Cyber Patriot.
Adding firewall and some type of Anti-Virus will need to be added. Firewall is already there but perhaps adding an Anti-Virus should be added. Something like ClamAV.
On most Linux systems, you can use PAM (the "pluggable authentication module") to enforce password complexity. We need to have a scenario were the kids can add password complexity using a scenario.
If you have a file named /etc/pam.d/system-auth on RedHat (/etc/pam.d/common-password on Debian systems), look for lines that look like those shown below.