2.4.4 Ensure Printer Sharing Is Disabled

Information

By enabling Printer Sharing, the computer is set up as a print server to accept print jobs from other computers. Dedicated print servers or direct IP printing should be used instead.

Rationale:

Disabling Printer Sharing mitigates the risk of attackers attempting to exploit the print server to gain access to the system.

Solution

Graphical Method:
Perform the following steps to disable Printer Sharing:

Open System Preferences

Select Sharing

Set Printer Sharing to disabled

Terminal Method:
Run the following command to disable Printer Sharing:

$ /usr/bin/sudo /usr/sbin/cupsctl --no-share-printers

See Also

https://workbench.cisecurity.org/files/4178