Files
macos_security/rules/system_settings/system_settings_printer_sharing_disable.yaml
Bob Gendler 2ab099bfcd Dev sonoma issue356 (#367)
* chore[rules]: updated STIG tags

Removed the stig tag from rules that weren't in the stig.
Added 'srg' tag to rules that had SRG references, but not in stig

Issue #356

* chore[baseline]: updated STIG baseline

* chore[references]: updated CCI and SRG refs

Updated severity where needed too

* fix[rule]: yaml syntax for CCI

* fix[rules]: added missing STIG ODVs

---------

Co-authored-by: Dan Brodjieski <daniel.brodjieski@nasa.gov>
Co-authored-by: Dan Brodjieski <dbrodjieski@icloud.com>
2024-02-26 15:50:02 -05:00

61 lines
1.0 KiB
YAML

id: system_settings_printer_sharing_disable
title: Disable Printer Sharing
discussion: |
Printer Sharing _MUST_ be disabled.
check: |
/usr/sbin/cupsctl | /usr/bin/grep -c "_share_printers=0"
result:
boolean: 1
fix: |
[source,bash]
----
/usr/sbin/cupsctl --no-share-printers
/usr/bin/lpstat -p | awk '{print $2}'| /usr/bin/xargs -I{} lpadmin -p {} -o printer-is-shared=false
----
references:
cce:
- CCE-92980-2
cci:
- CCI-000381
800-53r5:
- CM-7
- CM-7(1)
800-53r4:
- CM-7
- CM-7(1)
srg:
- SRG-OS-000095-GPOS-00049
disa_stig:
- APPL-14-002240
800-171r2:
- N/A
cis:
benchmark:
- 2.3.3.4 (level 1)
controls v8:
- 4.1
- 4.8
cmmc:
- CM.L2-3.4.6
- CM.L2-3.4.7
macOS:
- '14.0'
tags:
- 800-53r5_low
- 800-53r5_moderate
- 800-53r5_high
- 800-53r4_low
- 800-53r4_moderate
- 800-53r4_high
- cis_lvl1
- cis_lvl2
- cisv8
- cnssi-1253_moderate
- cnssi-1253_low
- cnssi-1253_high
- cmmc_lvl2
- stig
severity: medium
mobileconfig: false
mobileconfig_info: