OVALFileLinker from SCAP Security Guide ssg: [0, 1, 80], python: 3.10.12 5.11.2 2025-11-24T17:59:05 Extend Audit Backlog Limit for the Audit Daemon Ubuntu 22.04 Ensure audit_backlog_limit is configured in the kernel line in /etc/default/grub. Verify GRUB_DISABLE_RECOVERY Set to true Ubuntu 22.04 GRUB_DISABLE_RECOVERY set to 'true' in /etc/default/grub /etc/default/grub ^\s*GRUB_CMDLINE_LINUX="(.*)"$ 1 /etc/default/grub ^\s*GRUB_CMDLINE_LINUX_DEFAULT="(.*)"$ 1 /etc/default/grub.d/[^/]+\.cfg ^\s*GRUB_CMDLINE_LINUX="(.*)"$ 1 /etc/default/grub.d/*.cfg ^\s*GRUB_CMDLINE_LINUX_DEFAULT="(.*)"$ 1 /boot/grub/grub.cfg ^.*/vmlinuz.*(root=.*)$ 1 ^/etc/default/grub(\.d/[^/]+\.cfg)?$ ^\s*GRUB_DISABLE_RECOVERY=(.*)$ 1 ^(true|"true")$ ^(?:.*\s)?audit_backlog_limit= (?:\s.*)?$