1{ config, pkgs, lib, ... }:
2
3let
4 cfg = config.programs.iotop;
5in {
6 options = {
7 programs.iotop.enable = lib.mkEnableOption "iotop + setcap wrapper";
8 };
9 config = lib.mkIf cfg.enable {
10 security.wrappers.iotop = {
11 owner = "root";
12 group = "root";
13 capabilities = "cap_net_admin+p";
14 source = "${pkgs.iotop}/bin/iotop";
15 };
16 };
17}