An XCCDF Rule
/etc/systemd/system/kubelet.service
$ sudo chown root /etc/systemd/system/kubelet.service