diff --git a/kernel/util/path.go b/kernel/util/path.go
index 100742cb4..11bbd9b58 100644
--- a/kernel/util/path.go
+++ b/kernel/util/path.go
@@ -402,6 +402,9 @@ func IsSensitivePath(p string) bool {
 		"/lib",
 		"/srv",
 		"/tmp",
+		"/usr",
+		"/opt",
+		"/sbin",
 	}
 	for _, pre := range prefixes {
 		if strings.HasPrefix(toCheckPathLower, pre) {