cups - disable v. remove

Support for security such as Firewalls and securing linux
Post Reply
User avatar
Posts: 6
Joined: 2014/07/15 12:07:22

cups - disable v. remove

Post by jenaniston » 2014/08/02 16:42:03

Including this in security because of the security hole of the cupsd service running . . .
confirmed by aide-0.15.1-8.el7.x86_64 (Advanced Intrusion Detection Environment)
file integrity checker and intrusion detection program.

kernel is 3.10.0-123.el7.x86_64

As I understand . . . packages like redhat-lsb are needed for lsb_release which is needed for rpmbuild -
or maybe better put at : ... 00004.html
"...cups is a prerequisite for redhat-lsb? Removing cups broke a few things needing lsb_release."

Code: Select all

# rpm -q cups
# rpm -e cups
error: Failed dependencies:
        /usr/bin/lp is needed by (installed) redhat-lsb-core-4.1-24.el7.x86_64
        /usr/bin/lpr is needed by (installed) redhat-lsb-core-4.1-24.el7.x86_64
        cups is needed by (installed) ghostscript-cups-9.07-16.el7.x86_64
        cups >= 1:1.4 is needed by (installed) hpijs-1:3.13.7-6.el7.x86_64
        cups >= 1.2.1-1.7 is needed by (installed) gutenprint-cups-5.2.9-15.el7.x86_64
        cups is needed by (installed) kde-print-manager-4.10.5-4.el7.x86_64
Stopping cups.service only gets it started back up immediately (within seconds).

Code: Select all

# service cups stop
Redirecting to /bin/systemctl stop  cups.service
Warning: Stopping cups.service, but it can still be activated by:

# systemctl status cups.service
cups.service - CUPS Printing Service
   Loaded: loaded (/usr/lib/systemd/system/cups.service; enabled)
   Active: active (running) since Sat 2014-08-02 09:05:58 PDT; 12s ago
 Main PID: 5003 (cupsd)
   CGroup: /system.slice/cups.service
           └─5003 /usr/sbin/cupsd -f

Aug 02 09:05:58 computername systemd[1]: Started CUPS Printing Service.
So how do some of the experts here think about this ?

What do some of you think of this sort of advice (from google/linux questions) ?

"If nothing else needs printing then it's perfectly possible to keep redhat-lsb (using 'lsb_release --all' doesn't need printing) and ditch CUPS w/o any problems. Just add the "--nodeps" switch when using "-e". Adding "tsflags" in yum.conf and using "--repackage" switch with "rpm -e" will dump the uninstalled package in /var/spool/repackage so you can have rollback, just in case."

Posts: 172
Joined: 2006/12/11 12:28:52

Re: cups - disable v. remove

Post by unspawn » 2014/08/25 18:04:08

I'm no expert but sure you could ditch CUPS that way. Problem is it might return as dependency on upgrade and I have no idea if adding it as an "exclude=cups" yum.conf will work or b0rk upgrading. (You'll have to test that yourself.)

Post Reply

Return to “CentOS 7 - Security Support”