2.2.4 Ensure CUPS Server is not enabled

Information

The Common Unix Print System (CUPS) provides the ability to print to both local and
network printers. A system running CUPS can also accept print jobs from remote systems
and print them to local printers. It also provides a web based remote administration
capability.

Rationale:

If the system does not need to print jobs or accept print jobs from other systems, it is
recommended that CUPS be disabled to reduce the potential attack surface.

Solution

Run one of the following commands to disable cups :

# chkconfig cups off

# systemctl disable cups

# update-rc.d cups disable

Impact:

Disabling CUPS will prevent printing from the system, a common task for workstation
systems.

See Also

https://workbench.cisecurity.org/files/2420

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4, CSCv6|9.1, CSCv7|9.2

Plugin: Unix

Control ID: aff3ae4f4f04782e8b436f56eccc920205f1a7edbe7539135bd961fd9b1e5f1d