Is SUID status for printing utilities disabled?
If this machine is not going to be using printers, then you should disable the SUID status of the printing utilities. These utilities have a history of security vulnerabilities. This will disallow local, non-root users from initiating, modifying, and canceling print requests. Later, we'll ask about disabling printing entirely including stopping the print scheduler.