macOS
TMA-MACOS14-2.3.3.3
Ensure Printer Sharing Is Disabled
Description
By enabling Printer Sharing, the computer is set up as a print server to accept print jobs from other computers. Dedicated print servers or direct IP printing should be used instead. Disabling Printer Sharing mitigates the risk of attackers attempting to exploit the print server to gain access to the system.
How it is checked
Audit method: Shell command
out=$(/usr/sbin/cupsctl 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -c "_share_printers=0" || true- Expected output
1
How it is fixed
Fix method: Guidance or infrastructure patch
Graphical Method: Perform the following steps to disable Printer Sharing: 1. Open System Settings 2. Select General 3. Select Sharing 4. Set Printer Sharing to disabled Terminal Method: Run the following command to disable Printer Sharing: % /usr/bin/sudo /usr/sbin/cupsctl --no-share-printers
Properties
- Operating systems
- macos-14
- Tags
- macossonoma
- Reference
- CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.3.3.3 Ensure Printer Sharing Is Disabled
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
tmaegis scan --target macos