An XCCDF Group - A logical subset of the XCCDF Benchmark
/boot/grub2/user.cfg
root
$ sudo chgrp root /boot/grub2/user.cfg
/etc/grub.d/01_users
$ sed -i 's/\(set superusers=\).*/\1"<unique user ID>"/g' /etc/grub.d/01_users
grub.cfg
grubby --update-kernel=ALL
# grub2-setpassword