diff --git a/etc/rootwrap.conf b/etc/rootwrap.conf
index cbb96cd..cf4258d 100644
--- a/etc/rootwrap.conf
+++ b/etc/rootwrap.conf
@@ -10,7 +10,7 @@ filters_path=/etc/rootwrap.d
 # explicitely specify a full path (separated by ',')
 # If not specified, defaults to system PATH environment variable.
 # These directories MUST all be only writeable by root !
-exec_dirs=/sbin,/usr/sbin,/bin,/usr/bin
+exec_dirs=/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/bin
 
 # Enable logging to syslog
 # Default value is False
diff --git a/etc/rootwrap.d/network.filters b/etc/rootwrap.d/network.filters
index c1ffa50..e47448e 100644
--- a/etc/rootwrap.d/network.filters
+++ b/etc/rootwrap.d/network.filters
@@ -7,6 +7,7 @@ mv_bird: RegExpFilter, mv, root, mv, /tmp/bird6\.conf, /etc/bird/bird6\.conf
 
 # astara_router/drivers/arp.py: 'arp'..
 arp: CommandFilter, /usr/sbin/arp, root
+astara_gratuitous_arp: CommandFilter, astara-gratuitous-arp, root
 
 # astara_router/drivers/dnsmasq.py:
 mv_dnsmasq: RegExpFilter, mv, root, mv, /tmp/dnsmasq\.conf, /etc/dnsmasq\.d/.*\.conf