Now I understand why there are not tons of such bug reports: https://build.opensuse.org/request/show/950381 shows that the initial hardening of cupsd.service via harden_cups.service.patch had somehow never made it into openSUSE:Factory - as far as I understand it. So the Product "openSUSE Tumbleweed" seems plain wrong in this bug report here and actually it happened only to those users who use CUPS from the OBS Printing development project - so bug #1195289 is the actually right description with the actually right fix. See also https://bugzilla.suse.com/show_bug.cgi?id=1193216#c3 Now let's wait and see how hell breaks loose when that hardening of cupsd.service appears in Tumbleweed ;-)