TMAegisBeta
Más reglas para macos

macOS

TMA-MACOS14-2.3.3.3

Ensure Printer Sharing Is Disabled

MediaNivel 1Automatizadamacos

Descripción

By enabling Printer Sharing, the computer is set up as a print server to accept print jobs from other computers. Dedicated print servers or direct IP printing should be used instead. Disabling Printer Sharing mitigates the risk of attackers attempting to exploit the print server to gain access to the system.

Cómo se verifica

Método de auditoría: Comando de shell

shell
out=$(/usr/sbin/cupsctl 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -c "_share_printers=0" || true
Salida esperada
1

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Graphical Method: Perform the following steps to disable Printer Sharing: 1. Open System Settings 2. Select General 3. Select Sharing 4. Set Printer Sharing to disabled Terminal Method: Run the following command to disable Printer Sharing: % /usr/bin/sudo /usr/sbin/cupsctl --no-share-printers

Propiedades

Sistemas operativos
macos-14
Etiquetas
macossonoma
Referencia
CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.3.3.3 Ensure Printer Sharing Is Disabled

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell
tmaegis scan --target macos