An XCCDF Group - A logical subset of the XCCDF Benchmark
/boot/efi/EFI/redhat/grub.cfg
root
$ sudo chgrp root /boot/efi/EFI/redhat/grub.cfg
$ sudo chown root /boot/efi/EFI/redhat/grub.cfg
/boot/efi/EFI/redhat/user.cfg
$ sudo chown root /boot/efi/EFI/redhat/user.cfg
$ sudo chmod 700 /boot/efi/EFI/redhat/grub.cfg
$ sudo chmod 600 /boot/efi/EFI/redhat/user.cfg
/etc/grub.d/01_users
$ sed -i 's/\(set superusers=\).*/\1"<unique user ID>"/g' /etc/grub.d/01_users
grub.cfg
grubby --update-kernel=ALL
# grub2-setpassword
# grub2-mkpasswd-pbkdf2
/etc/grub.d/40_custom
set superusers="root" password_pbkdf2 boot grub.pbkdf2.sha512.VeryLongString
grub2-mkconfig -o /boot/efi/EFI/redhat/grub.cfg
usb0
cd
fd0
set root='hd0,msdos1'