On a fresh install of rawhide [x86-64], and logging into the gnome desk top I get: $ ss -ap ... LISTEN 0 128 *:60650 *:* users:(("gnome-session",6500,11)) LISTEN 0 128 :::58934 :::* users:(("gnome-session",6500,10)) ... There is no reason for gnome-session to be attempting to expose itself to the outside world. It should either be binding to localhost or [even better] using unix sockets [of which it has plenty open].
This was caused by a missing BuildRequires. Fixed in rawhide.