--- linux-2.6.18-028stab031/net/ipv4/arp.c.arp	2007-05-08 14:45:55.000000000 +0400
+++ linux-2.6.18-028stab031/net/ipv4/arp.c	2007-05-25 14:21:16.000000000 +0400
@@ -1145,7 +1145,8 @@ int arp_ioctl(unsigned int cmd, void __u
 	switch (cmd) {
 		case SIOCDARP:
 		case SIOCSARP:
-			if (!capable(CAP_NET_ADMIN))
+			if (!capable(CAP_NET_ADMIN) &&
+					!capable(CAP_VE_NET_ADMIN))
 				return -EPERM;
 		case SIOCGARP:
 			err = copy_from_user(&r, arg, sizeof(struct arpreq));