Re: Limiting attack surface for Debian sshd

[Lee <ler762@gmail.com>]

On Mon, Apr 14, 2025 at 10:27 AM Dan Purgert wrote:
>
> On Apr 14, 2025, Marc SCHAEFER wrote:
> > I wrote:
> >
> > > If you
> > >    sudo systemctl disable cups # and maybe others
> >
> > Actually, if you follow the discussion, the CUPS Bonjour auto-discovery
> >
> >    - it presumably handled by the cups-browsed package
> >      (you can uninstall it, or systemctl disable it,
> >       if you don't want printer auto-detection on your
> >       network)
> >
> >    - it could also be handled by mDNS (?)
>
> Yep, 'cups-browsed' is the mDNS listener service (plugin for avahi?) so
> that cups can find printers announcing themselves via mDNS.

I'm not sure I understand, but
$ sudo systemctl stop cups.service

$ lp -d Canon_MG3600_series check-for-updates.sh
lp: Bad file descriptor

If I turn the cups service back on I can print:

$ sudo systemctl start cups.service

$ lp -d Canon_MG3600_series check-for-updates.sh
request id is Canon_MG3600_series-4 (1 file(s))

Regards,
Lee