--- cups-1.6.3/cups/usersys.c
+++ cups-1.6.3/cups/usersys.c
@@ -846,6 +846,7 @@ _cupsSetDefaults(void)
 #endif /* HAVE_GSSAPI */
 			  cups_anyroot, cups_expiredroot,
 			  cups_expiredcerts, 1);
+    cupsFileClose(fp);
 
    /*
     * Then user defaults, if it is safe to do so...