Information
By enabling Printer Sharing, the computer is set up as a print server to accept print jobs from other computers. Dedicated print servers or direct IP printing should be used instead.
Disabling Printer Sharing mitigates the risk of attackers attempting to exploit the print server to gain access to the system.
Solution
Graphical Method:
Perform the following steps to disable Printer Sharing:
- Open System Settings
- Select General
- Select Sharing
- Set Printer Sharing to disabled
Terminal Method:
Run the following command to disable Printer Sharing:
$ /usr/bin/sudo /usr/sbin/cupsctl --no-share-printers
Item Details
Category: CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION
References: 800-53|CM-1, 800-53|CM-2, 800-53|CM-6, 800-53|CM-7, 800-53|CM-7(1), 800-53|CM-9, 800-53|SA-3, 800-53|SA-8, 800-53|SA-10, CSCv7|5.1, CSCv7|9.2
Control ID: df06b353b6238941e91c948e238086c17bab2b97c0d1a0f33e7c6d3e7e98c7a8