An XCCDF Group - A logical subset of the XCCDF Benchmark
/boot/grub2/grub.cfg
root
$ sudo chgrp root /boot/grub2/grub.cfg
$ sudo chown root /boot/grub2/grub.cfg
$ sudo chmod 600 /boot/grub2/grub.cfg
# grub2-setpassword