From Rocky Linux 9.4 forward, you can specify arbitrary custom mount points except for specific paths that are reserved for the operating system. Creation of different partitioning modes is now available including auto-lvm, lvm, and raw. Customize tailor options for a profile and add it to your blueprint customizations by using selected and unselected options to add and remove rules. Security: Listed below are security-related highlights in the latest Rocky Linux 9.4 release. For a complete list of security-related changes, see the upstream link. SELinux userspace release 3.6 introduces deny rules for further customizing policies. Keylime server components, the verifier and registrar, are available as Containers. Rsyslog processing system introduces customizable TLS/SSL encryption settings and additional options that relate to capability dropping. OpenSSL TLS toolkit adds a drop-in directory for provider-specific configuration files. libkcapi 1.4.0 introduces new tools and options. Notably, with the new -T option, you can specify target file names in hash-sum calculations. stunnel 5.7.1 TLS/SSL tunneling service changes the behavior of OpenSSL 1.1 and later versions in FIPS mode. Besides this change, this version provides many new features such as support for modern PostgreSQL clients.
Official announcement
Download Rocky Linux
