mediumservicesverified ✓rollback-safe
Disable CUPS print service
service-disable-cups · RHEL ≥ 8 · 1 impl
Description
The Common Unix Printing System (CUPS) provides printing services. On systems that do not require printing, this service should be disabled.
Rationale
Unnecessary services increase the attack surface. CUPS has historically had security vulnerabilities and should be disabled if not needed.
Check → Remediate
Checkservice_state
- name:
- cups
- active:
- false
- enabled:
- false
Remediateservice_masked
- name:
- cups
Framework references
CIS
rhel8 2.1.11rhel9 2.1.11rhel10 2.1.10
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#service#printing#attack-surface