Detections
Analytics
GEN003900 - The hosts.lpd file (or equivalent) must not contain a '+' character - 'Listen'
Information
Having the '+' character in the hosts.lpd (or equivalent) file allows all hosts to use local system print resources.Solution
Configure cups to use only the localhost or specified remote hosts.Procedure:
Modify the /etc/cups/cupsd.conf file to 'Listen' only to the local machine or a known set of hosts (i.e., Listen localhost:631).
Modify the /etc/cups/cupsd.conf file '<Location />' element to 'Deny From All' and 'Allow from 127.0.0.1' or allowed host addresses.
Restart cups:
# service cups restart
See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Group-ID|V-827, Rule-ID|SV-37447r2_rule, STIG-ID|GEN003900, Vuln-ID|V-827
Plugin: Unix
Control ID: 7684ae2cd5c0319d47c15fedd1b264a750112a6e60b87f473d85efb25af84711