Kali Kaneko
--- a/src/leap/bitmask/vpn/fw/firewall.py
+++ b/src/leap/bitmask/vpn/fw/firewall.py
        # if this is a bundle, we pick local. bundles ask to install it there.
        BITMASK_ROOT = BITMASK_ROOT_LOCAL
    else:
-        if os.path.isfile(BITMASK_ROOT_SYSTEM):
-            # we can be running from the debian package,
-            # or some other distro. it's the maintainer responsibility to put
-            # bitmask-root there.
-            BITMASK_ROOT = BITMASK_ROOT_SYSTEM
-        else:
-            # as a last case, we fall back to installing into the
-            # /usr/local/sbin version.
-            BITMASK_ROOT = BITMASK_ROOT_LOCAL
+        try:
+            if os.path.isfile(BITMASK_ROOT_SYSTEM):
+                # we can be running from the debian package,
+                # or some other distro. it's the maintainer responsibility to put