diff --git a/etc/default.nix b/etc/default.nix
index a9ea0336ee0..6b8bc81503d 100644
--- a/etc/default.nix
+++ b/etc/default.nix
@@ -231,6 +231,7 @@ import ../helpers/make-etc.nix {
       "chsh"
       "xlock"
       "kde"
+      "cups"
       "common"
       "common-console" # shared stuff for interactive local sessions
     ]
diff --git a/etc/pam.d/cups b/etc/pam.d/cups
new file mode 100644
index 00000000000..50f3cc5ce60
--- /dev/null
+++ b/etc/pam.d/cups
@@ -0,0 +1,4 @@
+auth     include        common
+account  include        common
+password include        common
+session  include        common