An XCCDF Group - A logical subset of the XCCDF Benchmark
/boot/grub2/grub.cfg
root
$ sudo chgrp root /boot/grub2/grub.cfg
/boot/grub2/user.cfg
$ sudo chgrp root /boot/grub2/user.cfg
$ sudo chown root /boot/grub2/grub.cfg
$ sudo chown root /boot/grub2/user.cfg
$ sudo chmod 700 /boot/grub2/grub.cfg
$ sudo chmod 600 /boot/grub2/user.cfg
/etc/grub.d/01_users
$ sed -i 's/\(set superusers=\).*/\1"<unique user ID>"/g' /etc/grub.d/01_users
grub.cfg
grubby --update-kernel=ALL
# grub2-setpassword