An XCCDF Rule
/etc/systemd/system/kubelet.service
$ sudo chgrp root /etc/systemd/system/kubelet.service