diff --git a/tasks/main.yml b/tasks/main.yml
index 2c6aa8f..0a1c154 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -18,6 +18,9 @@
   ansible.builtin.template:
       src: grub.cfg.j2
       dest: /etc/default/grub
+      validate: bash -n %s
+      owner: root
+      group: root
       mode: '0644'
   when: grub_config.stat.exists
 
diff --git a/templates/grub.cfg.j2 b/templates/grub.cfg.j2
index ca2a521..4d2863e 100644
--- a/templates/grub.cfg.j2
+++ b/templates/grub.cfg.j2
@@ -6,7 +6,8 @@ GRUB_DISTRIBUTOR={{ grub_distributor }}
 GRUB_DEFAULT={{ grub_default }}
 GRUB_DISABLE_SUBMENU={{ grub_disable_submenu }}
 GRUB_TERMINAL_OUTPUT={{ grub_terminal_output }}
-GRUB_CMDLINE_LINUX={{ grub_cmdline_linux }}
+GRUB_CMDLINE_LINUX_DEFAULT=""
+GRUB_CMDLINE_LINUX=""
 GRUB_DISABLE_RECOVERY={{ grub_disable_recovery }}
 GRUB_ENABLE_BLSCFG={{ grub_enable_blscfg  }}