2.4.4 Ensure Printer Sharing Is Disabled

Information

By enabling Printer Sharing the computer is set up as a print server to accept print jobs from other computers. Dedicated print servers or direct IP printing should be used instead.

Rationale:

Disabling Printer Sharing mitigates the risk of attackers attempting to exploit the print server to gain access to the system.

Solution

Perform the following to disable Printer Sharing:
Graphical Method:

Open System Preferences

Select Sharing

Uncheck Printer Sharing

Terminal Method:
Run the following command to disable Printer Sharing:

$ sudo cupsctl --no-share-printers

See Also

https://workbench.cisecurity.org/files/3573