The macOS system must disable Printer Sharing.

STIG ID: APPL-14-002240  |  SRG: SRG-OS-000095-GPOS-00049 | Severity: medium |  CCI: CCI-000381

Vulnerability Discussion

Printer Sharing must be disabled.

Check

Verify the macOS system is configured to disable Printer Sharing with the following command:

/usr/sbin/cupsctl | /usr/bin/grep -c "_share_printers=0"

If the result is not "1", this is a finding.

Fix

Configure the macOS system to disable Printer Sharing with the following commands:

/usr/sbin/cupsctl --no-share-printers
/usr/bin/lpstat -p | awk '{print $2}'| /usr/bin/xargs -I{} lpadmin -p {} -o printer-is-shared=false