2.3.3.4 Ensure Printer Sharing Is Disabled

Information

By enabling Printer Sharing, the computer is set up as a print server to accept print jobs from other computers. Dedicated print servers or direct IP printing should be used instead.

Disabling Printer Sharing mitigates the risk of attackers attempting to exploit the print server to gain access to the system.

Solution

Graphical Method:

Perform the following steps to disable Printer Sharing:

- Open System Settings
- Select General
- Select Sharing
- Set Printer Sharing to disabled

Terminal Method:

Run the following command to disable Printer Sharing:

$ /usr/bin/sudo /usr/sbin/cupsctl --no-share-printers

See Also

https://workbench.cisecurity.org/benchmarks/15551