1{
2 config,
3 lib,
4 pkgs,
5 ...
6}:
7
8let
9 cfg = config.programs.cnping;
10in
11{
12 options = {
13 programs.cnping = {
14 enable = lib.mkEnableOption "a setcap wrapper for cnping";
15 };
16 };
17
18 config = lib.mkIf cfg.enable {
19 security.wrappers.cnping = {
20 owner = "root";
21 group = "root";
22 source = "${pkgs.cnping}/bin/cnping";
23 capabilities = "cap_net_raw+ep";
24 };
25 };
26}