xccdf_org.ssgproject.content_rule_bios_disable_usb_boot xccdf_org.ssgproject.content_rule_encrypt_partitions xccdf_org.ssgproject.content_rule_only_allow_specific_certs xccdf_org.ssgproject.content_rule_partition_for_var_log xccdf_org.ssgproject.content_rule_wireless_disable_in_bios