<def-group>
  <definition class="compliance" id="grub2_disable_recovery" version="1">
    {{{ oval_metadata("Recovery mode should be disabled.", rule_title=rule_title) }}}
    <criteria operator="AND">
      <extend_definition definition_ref="bootloader_disable_recovery_set_to_true"
      comment="Check GRUB_DISABLE_RECOVERY=true in /etc/default/grub" />
    </criteria>
  </definition>
</def-group>
