2.4.4 Disable Printer Sharing

Information

By enabling Printer sharing the computer is set up as a print server to accept print jobs from other computers. Dedicated print servers or direct IP printing should be used instead.

Rationale:

Disabling Printer Sharing mitigates the risk of attackers attempting to exploit the print server to gain access to the system.

Solution

Perform the following to disable printer sharing:
Graphical Method:

Open System Preferences

Select Sharing

Uncheck Printer Sharing

Terminal Method:
Run the following command to disable printer sharing:

$ sudo cupsctl --no-share-printers

See Also

https://workbench.cisecurity.org/files/3195

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CSCv7|9.2

Plugin: Unix

Control ID: c211782d336589decaad2224c1ba51c395cd2c7df58d69b996cef4253f33fd12