An XCCDF Rule
/boot/config-*
CONFIG_PAGE_TABLE_ISOLATION
grep CONFIG_PAGE_TABLE_ISOLATION /boot/config-*