An XCCDF Rule
/boot/config-*
CONFIG_HARDENED_USERCOPY_FALLBACK
grep CONFIG_HARDENED_USERCOPY_FALLBACK /boot/config-*