2.4.4 Disable Printer Sharing

Information

By enabling Printer sharing the computer is set up as a print server to accept print jobs from other computers. Dedicated print servers or direct IP printing should be used instead.

Rationale:

Disabling Printer Sharing mitigates the risk of attackers attempting to exploit the print server to gain access to the system.

Solution

Perform the following to disable printer sharing:
Graphical Method:

Open System Preferences

Select Sharing

Uncheck Printer Sharing

Terminal Method:
Run the following command to disable printer sharing:

$ sudo cupsctl --no-share-printers

See Also

https://workbench.cisecurity.org/files/3013

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CSCv6|3.1

Plugin: Unix

Control ID: 01f7e35b40cc1a3cbb60ffbf2d3aa8068e541c9a952a3d946afc24bd9ff66158