V-827

Discussion

Having the '+' character in the hosts.lpd (or equivalent) file allows all hosts to use local system print resources.

Check Content

Look for the presence of a print service configuration file.

Procedure:
# find /etc -name hosts.lpd -print
# find /etc -name Systems -print  
# find /etc -name printers.conf

If none of the files are found, this check should be marked Not Applicable.  

Otherwise, examine the configuration file.

Procedure:
# more <print service file>

Check for entries that contain a ‘+’ or ‘_’ character.  If any are found, this is a finding.
For the "cups" print service, verify remote host access is limited.


# grep -i Listen /etc/cups/cupsd.conf 
The /etc/cups/cupsd.conf file must not contain a Listen *:<port> or equivalent line.
If the network address of the "Listen" line is unrestricted. This is a finding.

# grep -i "Allow From" /etc/cups/cupsd.conf 
The "Allow From" line within the "<Location />" element should limit access to the printers to @LOCAL and specific hosts.
If the "Allow From" line contains "All" this is a finding.