http://people.fedoraproject.org/~dwalsh/SELinux/F13/services_cups.patch Cups/interfaces policy Lots of new access. This is pretty well tested at this point.