2.2.3 Ensure CUPS is not installed

Information

The Common Unix Print System (CUPS) provides the ability to print to both local and network printers. A system running CUPS can also accept print jobs from remote systems and print them to local printers. It also provides a web based remote administration capability.

If the system does not need to print jobs or accept print jobs from other systems, it is recommended that CUPS be removed to reduce the potential attack surface.

Solution

Run one of the following commands to remove cups :

# apt purge cups

Impact:

Removing CUPS will prevent printing from the system, a common task for workstation systems.

See Also

https://workbench.cisecurity.org/benchmarks/15023

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: 3f7d15134efe989646ca0d0f862708261ad7814e89d13ea85dda5a0b2e16bc1a