Comment 16 for bug 133818

Till's proposal "it should allow everything for sub processes in /usr/lib/cups/filter/*" sounds good and appropriate, unfortunately that does not work due to bug 139105. So I need to open up /usr/local similar to /opt/ for the time being. So I have to sacrifice some security by opening up the policy for cupsd itself much more than necessary.