An XCCDF Rule
apt_get
::Remove-Unused-Dependencies
::Remove-Unused-Kernel-Packages
true
/etc/apt/apt.conf