I see no sign of `net_admin` at all, let alone `deny capability net_admin` in /etc/apparmor.d/usr.sbin.cupsd and am still seeing the audit log message:
Mar 25 11:59:41 emilia audit[1421]: AVC apparmor="DENIED" operation="capable" profile="/usr/sbin/cupsd" pid=1421 comm="cupsd" capability=12 capname="net_admin" 09:00:45 0$ dpkg -l cups-daemon Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ Name Version Architecture Description +++-==============-============-============-==================================> ii cups-daemon 2.4.2-2 amd64 Common UNIX Printing System(tm) - > Did this bug report get closed prematurely before a fixed package was actually produced ? -- - Athanasius (he/him) = Athanasius(at)miggy.org / https://miggy.org/ GPG/PGP Key: https://miggy.org/gpg-key "And it's me who is my enemy. Me who beats me up. Me who makes the monsters. Me who strips my confidence." Paula Cole - ME