I would like to propose using PrivateTmp for cups, to make it more secure and avoid users from being able to potentially effect it. http://fedoraproject.org/wiki/Features/ServicesPrivateTmp