{"id":73183,"date":"2023-10-31T15:51:19","date_gmt":"2023-10-31T07:51:19","guid":{"rendered":"https:\/\/version-2.com\/?p=73183"},"modified":"2023-10-24T15:53:05","modified_gmt":"2023-10-24T07:53:05","slug":"how-to-secure-your-rocky-linux-server","status":"publish","type":"post","link":"https:\/\/version-2.com\/zh\/2023\/10\/how-to-secure-your-rocky-linux-server\/","title":{"rendered":"How to Secure Your Rocky Linux Server"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Securing your Rocky Linux server is of paramount importance in today\u2019s digital landscape, where cyber threats and attacks are becoming increasingly sophisticated.\u00a0<\/p>

Whether you are running a blog or hosting critical business applications, ensuring the security of your server is essential to protect sensitive data, maintain privacy, and prevent unauthorized access.<\/p>

Servers often store valuable information that could be detrimental if compromised, including personal information, financial records, or confidential business data. A security breach can lead to data theft, identity theft, financial losses, and reputational damage for both individuals and organizations.<\/p>

Securing Rocky Linux is also essential for ensuring the smooth and uninterrupted functioning of critical applications and services. A compromised server may experience downtime, leading to disruptions in services, loss of productivity, and customer dissatisfaction. By implementing robust security measures, server administrators can decrease the risk of downtime and maintain a reliable and secure environment for their users.<\/p>

Next, a compromised server can be utilized for malicious purposes for further attacks, such as distributed denial-of-service (DDoS) attacks or spreading malware to other connected systems and acting as bot machines centrally managed by bad actors. By securing Rocky Linux, administrators not only protect their own infrastructure but also contribute to overall internet safety by preventing the server from being exploited in cybercriminal activities.<\/p>

In this tutorial, we will walk you through the best practices and essential security steps to secure your Rocky Linux server.<\/p>

We must note that the steps covered here are not exhaustive, and you should always stay updated with the latest security recommendations and patches to maintain a robust security posture.\u00a0<\/p>

Step 1: Log in to your Rocky Linux server via SSH<\/h2>

For this step, you need to make sure that you have a terminal or SSH (Secure Shell) client installed on your local machine. If you\u2019re using Linux or macOS, you can use the built-in terminal application. For Windows users, you will most likely use the PuTTY SSH client.<\/p>

Open the terminal and type the following command replacing username<\/strong> and server_ip_address<\/strong> with your own.<\/p>

ssh username@server_ip_address<\/p><\/div><\/div>

After you enter your password you will be logged into to your server.<\/p>

\"tutorial<\/figure>

Step 2: Update the server packages and set automatic security updates<\/h2>

It is very important to keep your server up to date, especially since there are often security updates that minimize the risk of breach or potential system crash.<\/p>

We have the option to manually update packages in Rocky Linux and that allows you to carefully review and test updates before applying them to your system, ensuring compatibility and stability. Also, it is always a good idea to update your system manually when you boot a new server that you will use.<\/p>

In order to check available updates on your system, you can run the following command:<\/p>

sudo dnf check-update<\/p><\/div><\/div>

You will get a similar output:<\/p>

\"tutorial<\/figure>

If you are on a new system, you can proceed with updating all listed packages by running the following command:<\/p>

sudo dnf update<\/p><\/div><\/div>

\"tutorial<\/figure>

Press y<\/strong> and hit Enter<\/strong> to continue.<\/p>

This process will download all the necessary packages from the designated repositories, upgrade to new versions, remove old packages, and perform cleanup for the package cache.<\/p>

\"tutorial<\/figure>

If you have a system where you already have various packages installed, specific versions that could potentially have issues if upgraded to the latest version, or that may conflict with your other packages, the better solution is to perform the minimal upgrade by running the following command:<\/p>

sudo dnf upgrade-minimal<\/p><\/div><\/div>

You can use this command only if you want to perform updates for packages that have essential bug fixes and various security patches, without the risk of breaking changes.<\/p>

Next, we can enable automatic updates and use the special package designed to automate the installation of security patches and other crucial upgrades for your Rocky Linux server.\u00a0<\/p>

To set up the automatic update process, we need to install the dnf-automatic<\/strong> package which is not available by default on your Rocky Linux server.\u00a0<\/p>

This command requires higher permissions so make sure you execute it with your sudo or root user:<\/p>

sudo dnf install dnf-automatic<\/p><\/div><\/div>

\"tutorial<\/figure>

Once the installation is complete, we need to edit the config file related to it:<\/p>

sudo vi \/etc\/dnf\/automatic.conf<\/p><\/div><\/div>

In your configuration file under \/etc\/dnf\/automatic.conf<\/strong>, find the line that starts with upgrade_type<\/strong>, and press the i <\/strong>key in order to enter the edit mode in your Vi editor and replace the value from default<\/strong> to security<\/strong>.<\/p>

\"tutorial<\/figure>

Since it is recommended to modify the default behavior to only include security upgrades, this will ensure automatic updates will not introduce breaking changes for your packages.<\/p>

In order to write the changes and exit the file using Vi, press Shift<\/strong> and :<\/strong> then type wq <\/strong>and press Enter<\/strong>.\u00a0<\/p>

Finally, we need to make sure that dnf-automatic<\/strong> service is enabled by default the next time we start or reboot our system.\u00a0<\/p>

We can do that by running the following command:<\/p>

sudo systemctl enable dnf-automatic-install.timer<\/p><\/div><\/div>

\"tutorial<\/figure>

The dnf-automatic-install.timer<\/strong> is a systemd timer unit that runs our dnf-automatic-install<\/strong> service. By default, it is scheduled to activate every day at 6 a.m., with a randomized delay of up to one hour.<\/p>

Step 3: Add sudo users<\/h2>

When you boot the system for the first time, by default the root user has full control and unrestricted access to all system resources. Running daily tasks with the root user is not ideal as there is a high probability that any mistake or malicious command executed by the root user can have drastic consequences for your system. In order to minimize these risks, the concept of sudo users was introduced which gives more granular control over access potential actions that a user can run on Linux servers.<\/p>

You can start by adding a new user to your Rocky Linux server:<\/p>

adduser jumpcloud<\/p><\/div><\/div>

Next, we will run the command so we can create a strong password for our newly created user:<\/p>

passwd jumpcloud<\/p><\/div><\/div>

After that, you can make sure that your user exists and has its own group if you run the id<\/em> command:<\/p>

id jumpcloud<\/p><\/div><\/div>

You can see a similar output:<\/p>

\"tutorial<\/figure>

The next step consists of elevating the permissions of our jumpcloud<\/em> user so it can execute sudo commands.<\/p>

sudo usermod -aG wheel jumpcloud<\/p><\/div><\/div>

In this case, the user \u201cjumpcloud\u201d will be added to the \u201cwheel\u201d group, providing it administrative privileges on the system.<\/p>

If you\u2019d like more details on creating sudo users and managing sudo access on Rocky Linux, check out the following tutorial: How to Create Sudo Users for Rocky Linux<\/a>.<\/p>

Step 4: Secure SSH\u00a0<\/h2>

SSH (Secure Shell) provides remote access to your server and is often targeted by attackers. To enhance SSH security<\/a> we can implement certain security measures.<\/p>

First, we can change the default port for our SSH server by changing the config file related to it.<\/p>

We advise you to create a backup of your configuration file if it gets corrupted, so you can run the following command:<\/p>

sudo cp \/etc\/ssh\/sshd_config \/etc\/ssh\/sshd_config_backup<\/p><\/div><\/div>

Next, we will edit the configuration file.<\/p>

sudo vi \/etc\/ssh\/sshd_config<\/p><\/div><\/div>

SSH typically operates on the well-known port 22, making it a prime target for attackers, mainly due to the rise of highly automated attacks in recent times. To enhance security, consider changing the default SSH port. This simple step adds an extra layer of obscurity, making it harder for attackers to find and target your SSH service. By choosing an unused port between 1024 and 65535, you can significantly reduce the number of automated attacks directed at your server.<\/p>

Alternatively, you could opt to set up a hardened jump box<\/a>, also known as a jump host. Additional hardening and security can be layered onto the jump box instead of directly opening up ports on your server to the web.\u00a0<\/p>

In our case we will use port 2222, so you can scroll down and find Port 22 line:<\/p>

\"tutorial<\/figure>

Press i<\/strong> for edit, uncomment that line, and instead of 22, replace with 2222.<\/p>

\"tutorial<\/figure>

Press Escape<\/strong> and type :wq<\/strong> to write the changes and exit the file.<\/p>

Just above the port number configuration, note that changing the SSH port requires updating the SELinux configuration. SELinux, which originates from Red Hat, is enabled by default on Rocky Linux. Its main purpose is to restrict actions that Linux processes and users can perform on the system, as that will minimize the impact of security breaches or unauthorized access. SELinux follows the principle of least privilege, granting processes and users only the essential permissions required for their intended tasks.<\/p>

However, it is worth noting that the semanage<\/strong> command might not be readily available on Rocky Linux. To verify the necessary dependencies, we can run a check:<\/p>

yum provides \/usr\/sbin\/semanage<\/p><\/div><\/div>

\"tutorial<\/figure>

From here we can see that we need to install additional Python libraries, and we can do so by running the following command:<\/p>

sudo yum install policycoreutils-python-utils<\/p><\/div><\/div>

\"tutorial<\/figure>

Type y<\/strong>, and hit Enter<\/strong> which will install the package.<\/p>

Next, you can use this command which tells SELinux that the SSH service is now running on the new port 2222.<\/p>

sudo semanage port -a -t ssh_port_t -p tcp 2222<\/p><\/div><\/div>

Now, we need to add an exception to our firewall so we don\u2019t get a connection refused error.<\/p>

Rocky Linux uses firewalld, so we can add the rule:\u00a0<\/p>

sudo firewall-cmd \u2013zone=public \u2013add-port=2222\/tcp \u2013permanent<\/p><\/div><\/div>

Next, we should reload the firewall so it starts using the new rule we added:<\/p>

firewall-cmd \u2013reload<\/p><\/div><\/div>

Now, let\u2019s give our SSH server a restart to implement the updated configuration and initiate SSH logging via port 2222. It\u2019s time to apply the changes and get started with enhanced security.<\/p>

sudo systemctl restart sshd<\/p><\/div><\/div>

Now you can try and log in to your Rocky Linux server by adding the -p<\/strong> option and adding our new port number.<\/p>

ssh -p 2222 username@server_ip_address<\/p><\/div><\/div>

We can use SSH key<\/a> authorization in order to secure our server further. We will also disable logging with the password in our SSH configuration.<\/p>

By following this method, the possibility of brute force attacks on passwords is completely eradicated, guaranteeing that only users that possess the matching private keys gain access to the system.\u00a0<\/p>

In case you don\u2019t already have an SSH key pair on your local machine, you can create one.<\/p>

To start, open a terminal on your local machine and enter the following command:<\/p>

ssh-keygen -t rsa<\/p><\/div><\/div>

This command will ask you to select a location to save the keys and set an optional passphrase for added security. The passphrase is also recommended.<\/p>

\"tutorial<\/figure>

Once you have generated your SSH key pair, you need to copy the public key to your Rocky Linux server. You can use the ssh-copy-id command to do this.\u00a0<\/p>

In our case we will run the following command:<\/p>

ssh-copy-id -p 2222 -i ~\/.ssh\/jumpcloud_rockylinux.pub jumpcloud@194.195.240.58<\/p><\/div><\/div>

You will get a similar output:<\/p>

\"tutorial<\/figure>

Next, this command will prompt you to enter your user password on the remote server. Once you provide the password, the public key will be copied to the ~\/.ssh\/authorized_keys<\/strong> file on the server.<\/p>

Before we can log into the server, we need to change the permissions to our key file and assign them permissions with the value 400.\u00a0<\/p>

We can do so by running the following command in our local terminal:<\/p>

chmod 400 ~\/.ssh\/jumpcloud_rockylinux<\/p><\/div><\/div>

Next, we will connect with our server:<\/p>

ssh -i ~\/.ssh\/jumpcloud_rockylinux -p 2222 jumpcloud@194.195.240.58<\/p><\/div><\/div>

This command will load the private key through the specified path on the local machine and also use the custom port that we set.<\/p>

You should be able to log in without entering a password because the server is now configured to use SSH keys for authentication.<\/p>

\"tutorial<\/figure>

We can disable password logging and use only SSH keys by editing the configuration file again:<\/p>

sudo vi \/etc\/ssh\/sshd_config<\/p><\/div><\/div>

We need to uncomment the part related to the PubkeyAuthentication<\/strong> and set it to yes<\/strong>:<\/p>

\"tutorial<\/figure>

Next, we need to change the PasswordAuthentication<\/strong> to no<\/strong>:<\/p>

\"tutorial<\/figure>

We can also disable SSH logging with the root username:<\/p>

\"tutorial<\/figure>

This will also enhance the security of your SSH, but keep in mind that you need to have at least one sudo user already so you don\u2019t get locked out or become unable to perform higher privilege tasks.<\/p>

Save the file, and then restart the SSH service so it loads the new configuration.<\/p>

sudo systemctl restart sshd<\/p><\/div><\/div>

With key-based authentication now enforced, the need to enter a password during login should be eliminated. This security enhancement ensures that only users with the appropriate SSH keys can access the server.<\/p>

Step 5: Install and configure Fail2Ban<\/h2>

Fail2Ban is a very useful tool for protecting your Rocky Linux server from brute force attacks and unauthorized access attempts. By monitoring log files and automatically banning suspicious IP addresses, Fail2Ban adds an extra layer of security to your system.\u00a0<\/p>

Fail2Ban is not included in the default software repositories of Rocky Linux. Nevertheless, you can easily access it through the Enhanced Packages for Enterprise Linux (EPEL) repository<\/a>, a source for third-party packages on Red Hat and Rocky Linux. If you haven\u2019t yet added the EPEL repository to your system\u2019s package sources, you can easily incorporate the repository using dnf<\/strong>, similar to installing any other package.<\/p>

sudo dnf install epel-release -y<\/p><\/div><\/div>

After this step, we need to install the Fail2Ban service. We can do so by running the following command:<\/p>

sudo dnf install fail2ban<\/p><\/div><\/div>

\"tutorial<\/figure>

This will install various dependencies also related to modules that work together with SELinux, Sendmail, or the firewalld service.<\/p>

Next, we can create a new file called \u201cjail.local<\/strong>\u201d where we will store our custom configuration:<\/p>

sudo vi \/etc\/fail2ban\/jail.local<\/p><\/div><\/div>

Here we can build our custom config where we will override default values:<\/p>

[DEFAULT]
# here you can overwrite some defaults:
[sshd]
enabled = true
port \u00a0 \u00a0 = ssh,2222
filter \u00a0 = sshd
bantime\u00a0 = 30m
findtime\u00a0 = 5m
maxretry = 3<\/p><\/div><\/div>

We will change the default values from the original jail.conf <\/strong>file.<\/p>

The bantime<\/strong> parameter defines the duration that an IP address will be banned after multiple failed login attempts. By default, it is set to 10 minutes. We can adjust this value to 30 minutes.<\/p>

bantime = 30m\u00a0\u00a0<\/p><\/div><\/div>

The findtime<\/strong> parameter specifies the time window during which repeated failed login attempts will be counted. The default value is 10 minutes. Setting findtime<\/strong> to more than 10 minutes (600 seconds) can be beneficial in scenarios where you want to be less sensitive to temporary spikes in failed login attempts. For instance, if you have legitimate users who sometimes mistype their passwords, a longer findtime<\/strong> allows them more time to reattempt without getting banned.<\/p>

On the other hand, setting findtime<\/strong> to less than 10 minutes can make Fail2Ban more responsive to potential attacks. If there\u2019s a rapid and sustained increase in failed login attempts within a short time, a shorter findtime<\/strong> can trigger the ban sooner, reducing the attack surface and blocking the malicious attempts more promptly.\u00a0<\/p>

In our case, we will reduce the time to five minutes.<\/p>

findtime = 5m<\/p><\/div><\/div>

The maxretry<\/strong> parameter defines the number of consecutive failed login attempts allowed before banning an IP address. By default, it is set to 5. We can adjust it so that it is limited to three attempts.<\/p>

maxretry = 3\u00a0<\/p><\/div><\/div>

After editing and saving the configuration file, we can enable the service so that it starts every time we boot the system:<\/p>

sudo systemctl enable fail2ban<\/p><\/div><\/div>

\"tutorial<\/figure>

We can start the service by running the following command:<\/p>

sudo systemctl start fail2ban<\/p><\/div><\/div>

While we are logged in to our SSH session, we can use another terminal and try to log in with some non-existent username and without an SSH key:<\/p>

ssh -p 2222 jumpcloud3@194.195.240.58<\/p><\/div><\/div>

After three bad attempts, our IP address will be banned temporarily for further login attempts:<\/p>

\"tutorial<\/figure>
\"tutorial<\/figure>

For the last attempt, we get the \u201cConnection refused\u201d error, which is clearly the ban action of our service that honors our configuration parameters.\u00a0<\/p>

By default, the log file related to the Fail2Ban service is stored in \/var\/log\/fail2ban.log<\/strong> and we can check the latest Fail2Ban events:\u00a0<\/p>

sudo tail \/var\/log\/fail2ban.log<\/p><\/div><\/div>

We can see logged events about our IP address and the exact timestamp when the Fail2Ban service banned our IP address from further attempts.\u00a0<\/p>

\"tutorial<\/figure>

The ban applies to subsequent connection attempts from that IP address. For test purposes, if you are still logged into the server from your initial SSH session, it will not be affected by the ban. However, if you log out and try to establish a new SSH connection, the new connection attempt might be blocked by the ban.<\/p>

Conclusion<\/h2>

In this tutorial we covered multiple ways to enhance the security of your Rocky Linux server, from patch management to user privilege and access management, to securing SSH and event logging. You should also learn how to enable full-disk encryption<\/a> as well.<\/p>

If you\u2019re an IT admin or MSP provider managing multiple Linux instances, putting these best practices into place can quickly become an overly time-consuming, manual process. That\u2019s where a truly unified endpoint management solution like JumpCloud can help.<\/p>

With JumpCloud\u2019s open directory platform in place, you can apply key security configurations and policies to various groups of users and devices all at once, regardless of whether your fleet consists of Linux, macOS, Windows, iOS, or Android systems.\u00a0<\/p><\/article>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t
\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t

About Version 2 Digital<\/h3>

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.\n

\nThrough an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t\n\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

About JumpCloud<\/strong>
At JumpCloud, our mission is to build a world-class cloud directory. Not just the evolution of Active Directory to the cloud, but a reinvention of how modern IT teams get work done. The JumpCloud Directory Platform is a directory for your users, their IT resources, your fleet of devices, and the secure connections between them with full control, security, and visibility.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Securing your Rocky Linux server is of paramount import […]<\/p>\n","protected":false},"author":149011790,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_wpcom_ai_launchpad_first_post":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[1016,1075,61],"tags":[1017,1076],"class_list":["post-73183","post","type-post","status-publish","format-standard","hentry","category-jumpcloud","category-year2023","category-press-release","tag-jumpcloud","tag-1076"],"acf":[],"yoast_head":"\nHow to Secure Your Rocky Linux Server - Version 2<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/how-to-secure-your-rocky-linux-server\" \/>\n<meta property=\"og:locale\" content=\"zh_HK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Secure Your Rocky Linux Server - Version 2\" \/>\n<meta property=\"og:description\" content=\"Securing your Rocky Linux server is of paramount import […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/how-to-secure-your-rocky-linux-server\" \/>\n<meta property=\"og:site_name\" content=\"Version 2\" \/>\n<meta property=\"article:published_time\" content=\"2023-10-31T07:51:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/1-1.png\" \/>\n<meta name=\"author\" content=\"tracylamv2\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"tracylamv2\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9810\u8a08\u95b1\u8b80\u6642\u9593\" \/>\n\t<meta name=\"twitter:data2\" content=\"19 \u5206\u9418\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/jumpcloud.com\\\/blog\\\/how-to-secure-your-rocky-linux-server#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/2023\\\/10\\\/how-to-secure-your-rocky-linux-server\\\/\"},\"author\":{\"name\":\"tracylamv2\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/person\\\/011bc7c3731c930bcfeecd52fefb6365\"},\"headline\":\"How to Secure Your Rocky Linux Server\",\"datePublished\":\"2023-10-31T07:51:19+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/2023\\\/10\\\/how-to-secure-your-rocky-linux-server\\\/\"},\"wordCount\":2892,\"publisher\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/jumpcloud.com\\\/blog\\\/how-to-secure-your-rocky-linux-server#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/jumpcloud.com\\\/\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/1-1.png\",\"keywords\":[\"JumpCloud\",\"2023\"],\"articleSection\":[\"JumpCloud\",\"2023\",\"Press Release\"],\"inLanguage\":\"zh-HK\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/version-2.com\\\/2023\\\/10\\\/how-to-secure-your-rocky-linux-server\\\/\",\"url\":\"https:\\\/\\\/jumpcloud.com\\\/blog\\\/how-to-secure-your-rocky-linux-server\",\"name\":\"How to Secure Your Rocky Linux Server - Version 2\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/jumpcloud.com\\\/blog\\\/how-to-secure-your-rocky-linux-server#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/jumpcloud.com\\\/blog\\\/how-to-secure-your-rocky-linux-server#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/jumpcloud.com\\\/\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/1-1.png\",\"datePublished\":\"2023-10-31T07:51:19+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/jumpcloud.com\\\/blog\\\/how-to-secure-your-rocky-linux-server#breadcrumb\"},\"inLanguage\":\"zh-HK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/jumpcloud.com\\\/blog\\\/how-to-secure-your-rocky-linux-server\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-HK\",\"@id\":\"https:\\\/\\\/jumpcloud.com\\\/blog\\\/how-to-secure-your-rocky-linux-server#primaryimage\",\"url\":\"https:\\\/\\\/jumpcloud.com\\\/\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/1-1.png\",\"contentUrl\":\"https:\\\/\\\/jumpcloud.com\\\/\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/1-1.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/jumpcloud.com\\\/blog\\\/how-to-secure-your-rocky-linux-server#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9801\",\"item\":\"https:\\\/\\\/version-2.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Secure Your Rocky Linux Server\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#website\",\"url\":\"https:\\\/\\\/version-2.com\\\/zh\\\/\",\"name\":\"Version 2\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/version-2.com\\\/zh\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"zh-HK\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#organization\",\"name\":\"Version 2\",\"url\":\"https:\\\/\\\/version-2.com\\\/zh\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-HK\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/version-2.com\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/version-2.com\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1\",\"width\":1795,\"height\":335,\"caption\":\"Version 2\"},\"image\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/person\\\/011bc7c3731c930bcfeecd52fefb6365\",\"name\":\"tracylamv2\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-HK\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g\",\"caption\":\"tracylamv2\"},\"url\":\"https:\\\/\\\/version-2.com\\\/zh\\\/author\\\/tracylamv2\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Secure Your Rocky Linux Server - Version 2","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/how-to-secure-your-rocky-linux-server","og_locale":"zh_HK","og_type":"article","og_title":"How to Secure Your Rocky Linux Server - Version 2","og_description":"Securing your Rocky Linux server is of paramount import […]","og_url":"https:\/\/jumpcloud.com\/blog\/how-to-secure-your-rocky-linux-server","og_site_name":"Version 2","article_published_time":"2023-10-31T07:51:19+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/1-1.png","type":"","width":"","height":""}],"author":"tracylamv2","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"tracylamv2","\u9810\u8a08\u95b1\u8b80\u6642\u9593":"19 \u5206\u9418"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/how-to-secure-your-rocky-linux-server#article","isPartOf":{"@id":"https:\/\/version-2.com\/2023\/10\/how-to-secure-your-rocky-linux-server\/"},"author":{"name":"tracylamv2","@id":"https:\/\/version-2.com\/zh\/#\/schema\/person\/011bc7c3731c930bcfeecd52fefb6365"},"headline":"How to Secure Your Rocky Linux Server","datePublished":"2023-10-31T07:51:19+00:00","mainEntityOfPage":{"@id":"https:\/\/version-2.com\/2023\/10\/how-to-secure-your-rocky-linux-server\/"},"wordCount":2892,"publisher":{"@id":"https:\/\/version-2.com\/zh\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-secure-your-rocky-linux-server#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/1-1.png","keywords":["JumpCloud","2023"],"articleSection":["JumpCloud","2023","Press Release"],"inLanguage":"zh-HK"},{"@type":"WebPage","@id":"https:\/\/version-2.com\/2023\/10\/how-to-secure-your-rocky-linux-server\/","url":"https:\/\/jumpcloud.com\/blog\/how-to-secure-your-rocky-linux-server","name":"How to Secure Your Rocky Linux Server - Version 2","isPartOf":{"@id":"https:\/\/version-2.com\/zh\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-secure-your-rocky-linux-server#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-secure-your-rocky-linux-server#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/1-1.png","datePublished":"2023-10-31T07:51:19+00:00","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-secure-your-rocky-linux-server#breadcrumb"},"inLanguage":"zh-HK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/how-to-secure-your-rocky-linux-server"]}]},{"@type":"ImageObject","inLanguage":"zh-HK","@id":"https:\/\/jumpcloud.com\/blog\/how-to-secure-your-rocky-linux-server#primaryimage","url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/1-1.png","contentUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/1-1.png"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/how-to-secure-your-rocky-linux-server#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9801","item":"https:\/\/version-2.com\/"},{"@type":"ListItem","position":2,"name":"How to Secure Your Rocky Linux Server"}]},{"@type":"WebSite","@id":"https:\/\/version-2.com\/zh\/#website","url":"https:\/\/version-2.com\/zh\/","name":"Version 2","description":"","publisher":{"@id":"https:\/\/version-2.com\/zh\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/version-2.com\/zh\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"zh-HK"},{"@type":"Organization","@id":"https:\/\/version-2.com\/zh\/#organization","name":"Version 2","url":"https:\/\/version-2.com\/zh\/","logo":{"@type":"ImageObject","inLanguage":"zh-HK","@id":"https:\/\/version-2.com\/zh\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/version-2.com\/wp-content\/uploads\/2020\/08\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1","contentUrl":"https:\/\/i0.wp.com\/version-2.com\/wp-content\/uploads\/2020\/08\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1","width":1795,"height":335,"caption":"Version 2"},"image":{"@id":"https:\/\/version-2.com\/zh\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/version-2.com\/zh\/#\/schema\/person\/011bc7c3731c930bcfeecd52fefb6365","name":"tracylamv2","image":{"@type":"ImageObject","inLanguage":"zh-HK","@id":"https:\/\/secure.gravatar.com\/avatar\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g","caption":"tracylamv2"},"url":"https:\/\/version-2.com\/zh\/author\/tracylamv2\/"}]}},"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pbQRKm-j2n","jetpack_featured_media_url":"","post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/posts\/73183","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/users\/149011790"}],"replies":[{"embeddable":true,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/comments?post=73183"}],"version-history":[{"count":4,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/posts\/73183\/revisions"}],"predecessor-version":[{"id":73187,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/posts\/73183\/revisions\/73187"}],"wp:attachment":[{"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/media?parent=73183"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/categories?post=73183"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/tags?post=73183"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}