0088-cups-uninstalled - cups installed¶

Rule ID¶

• 0088-cups-uninstalled

Category¶

• system

Level¶

• warn

Compatible Versions¶

• Linux

Description¶

• The Common Unix Printing System (CUPS) provides printing capabilities to local and network printers. Systems running CUPS can also accept print jobs from remote systems and print them to local printers. It also provides web-based remote management functionality.

Scan Frequency¶

• 0 */30 * * *

Rationale¶

• System functions typically do not require automatic discovery of network services. It is recommended to remove this package to reduce the potential attack surface.

Risk Items¶

• Increased attack surface

Audit Method¶

• Run the following command to verify that the corresponding component is not installed:

  # rpm -q cups
  package cups is not installed
  

Remediation¶

• Run the following command to remove the corresponding package:

  # yum remove cups
  

Impact¶

• Disabling CUPS will prevent printing from the system, which is a common task for workstation systems.

Default Value¶

• None

References¶

• None

CIS Controls¶

• Version 7 2.6 Address Unapproved Software Ensure that unauthorized software is removed, or the inventory is updated in a timely manner.