An XCCDF Rule
/etc/systemd/system/kubelet.service
$ sudo chmod 0644 /etc/systemd/system/kubelet.service