diff --git a/etc/neutron/rootwrap.d/linuxbridge-plugin.filters b/etc/neutron/rootwrap.d/linuxbridge-plugin.filters
index f0934357ba6..298b8077559 100644
--- a/etc/neutron/rootwrap.d/linuxbridge-plugin.filters
+++ b/etc/neutron/rootwrap.d/linuxbridge-plugin.filters
@@ -13,6 +13,7 @@
 # from the old mechanism
 brctl: CommandFilter, brctl, root
 bridge: CommandFilter, bridge, root
+sysctl: CommandFilter, sysctl, root
 
 # ip_lib
 ip: IpFilter, ip, root