diff --git a/apparmor.d/groups/ubuntu/cron-ubuntu-fan b/apparmor.d/groups/ubuntu/cron-ubuntu-fan
index eb299345c..8f5952d9b 100644
--- a/apparmor.d/groups/ubuntu/cron-ubuntu-fan
+++ b/apparmor.d/groups/ubuntu/cron-ubuntu-fan
@@ -15,7 +15,7 @@ profile cron-ubuntu-fan @{exec_path} {
   @{exec_path} mr,
 
   @{sh_path}         rix,
-  @{bin}/fanctl      rix,
+  @{sbin}/fanctl     rix,
   @{bin}/flock       rix,
   @{bin}/grep        rix,
   @{bin}/id          rix,
diff --git a/apparmor.d/groups/virt/containerd-shim-runc-v2 b/apparmor.d/groups/virt/containerd-shim-runc-v2
index 5a963beac..61898a3e4 100644
--- a/apparmor.d/groups/virt/containerd-shim-runc-v2
+++ b/apparmor.d/groups/virt/containerd-shim-runc-v2
@@ -30,7 +30,7 @@ profile containerd-shim-runc-v2 @{exec_path} flags=(attach_disconnected) {
 
   @{exec_path} mrix,
 
-  @{bin}/runc rPUx,
+  @{sbin}/runc rPx,
 
   /tmp/runc-process@{int} rw,
   /tmp/pty@{int}/ rw,
diff --git a/apparmor.d/groups/virt/dockerd b/apparmor.d/groups/virt/dockerd
index 6b1e3537a..c4b39ff8c 100644
--- a/apparmor.d/groups/virt/dockerd
+++ b/apparmor.d/groups/virt/dockerd
@@ -72,7 +72,7 @@ profile dockerd @{exec_path} flags=(attach_disconnected) {
   @{bin}/git                     rCx -> git,
   @{bin}/kmod                    rPx,
   @{bin}/ps                      rPx,
-  @{bin}/runc                    rUx,
+  @{sbin}/runc                   rUx,
   @{bin}/unpigz                  rix,
   @{sbin}/xtables-nft-multi      rix,
 
diff --git a/tests/sbin.list b/tests/sbin.list
index 82596a62a..805ab8bf1 100644
--- a/tests/sbin.list
+++ b/tests/sbin.list
@@ -46,6 +46,7 @@ arptables-nft-restore
 arptables-nft-save
 arptables-restore
 arptables-save
+arptables-translate
 aspell-autobuildhash
 atd
 audisp-af_unix
@@ -92,6 +93,7 @@ blogger
 bluetoothd
 bpflist-bpfcc
 bpftool
+brctl
 bridge
 brltty
 brltty-setup
@@ -241,7 +243,9 @@ f2fscrypt
 f2fslabel
 f2fsslower-bpfcc
 faillock
+fanatic
 fancontrol
+fanctl
 fatlabel
 fatresize
 fbtest
@@ -767,6 +771,7 @@ rubyflow-bpfcc
 rubygc-bpfcc
 rubyobjnew-bpfcc
 rubystat-bpfcc
+runc
 runlevel
 runqlat-bpfcc
 runqlat.bt