1{
2 config,
3 pkgs,
4 lib,
5 ...
6}:
7
8let
9 cfg = config.programs.iotop;
10in
11{
12 options = {
13 programs.iotop = {
14 enable = lib.mkEnableOption "iotop + setcap wrapper";
15 package = lib.mkPackageOption pkgs "iotop" { example = "iotop-c"; };
16 };
17 };
18 config = lib.mkIf cfg.enable {
19 security.wrappers.iotop = {
20 owner = "root";
21 group = "root";
22 capabilities = "cap_net_admin+p";
23 source = lib.getExe cfg.package;
24 };
25 };
26}