security_AccountsBaseline: add CUPS user/groups

It's safe to have this before we actually build in cups, since the test
ignores entries that are listed here but are not on the DUT.

BUG=chrome-os-partner:47758, chrome-os-partner:49267
TEST=`test_that ... security_AccountsBaseline` on image with USE=cups

Change-Id: If289c05d866949e9fbf236b4998ea308fe68eb9b
Signed-off-by: Brian Norris <briannorris@chromium.org>
Reviewed-on: https://chromium-review.googlesource.com/345579
Reviewed-by: Sean Kau <skau@chromium.org>
Reviewed-by: Ricky Zhou <rickyz@chromium.org>
diff --git a/client/site_tests/security_AccountsBaseline/baseline.group b/client/site_tests/security_AccountsBaseline/baseline.group
index a534139..3de5213 100644
--- a/client/site_tests/security_AccountsBaseline/baseline.group
+++ b/client/site_tests/security_AccountsBaseline/baseline.group
@@ -74,6 +74,8 @@
 buffet:!:264:chronos,buffet,power
 webservd:!:266:buffet,webservd
 dnsmasq:!:268:dnsmasq
+lpadmin:!:269:chronos,cups
+cups:!:277:
 arc-camera:!:603:
 ntfs-3g:!:300:
 avfs:!:301:
diff --git a/client/site_tests/security_AccountsBaseline/baseline.passwd b/client/site_tests/security_AccountsBaseline/baseline.passwd
index c1a57b5..4acaf6a 100644
--- a/client/site_tests/security_AccountsBaseline/baseline.passwd
+++ b/client/site_tests/security_AccountsBaseline/baseline.passwd
@@ -60,6 +60,7 @@
 buffet:!:264:264:/dev/null:/bin/false
 webservd:!:266:266:/dev/null:/bin/false
 dnsmasq:!:268:268:/dev/null:/bin/false
+cups:!:277:277:/dev/null:/bin/false
 arc-camera:!:603:603::/dev/null:/bin/false
 ntfs-3g:!:300:300::/dev/null:/bin/false
 avfs:!:301:301::/dev/null:/bin/false