Detections
Analytics

2.4.4 Ensure Printer Sharing Is Disabled

Information

By enabling Printer Sharing, the computer is set up as a print server to accept print jobs from other computers. Dedicated print servers or direct IP printing should be used instead.

Rationale:

Disabling Printer Sharing mitigates the risk of attackers attempting to exploit the print server to gain access to the system.

Solution

Graphical Method:
Perform the following steps to disable Printer Sharing:

Open System Preferences

Select Sharing

Set Printer Sharing to disabled

Terminal Method:
Run the following command to disable Printer Sharing:

$ /usr/bin/sudo /usr/sbin/cupsctl --no-share-printers

See Also

https://workbench.cisecurity.org/files/4178

Item Details

References: CSCv7|5.1, CSCv7|9.2

Plugin: Unix

Control ID: 464659a4f6cc4541108694465657117c37c365544c36a3cb69951a087a908d3d