at master 401 B view raw
1{ 2 config, 3 lib, 4 pkgs, 5 ... 6}: 7 8let 9 cfg = config.programs.cnping; 10in 11{ 12 options = { 13 programs.cnping = { 14 enable = lib.mkEnableOption "a setcap wrapper for cnping"; 15 }; 16 }; 17 18 config = lib.mkIf cfg.enable { 19 security.wrappers.cnping = { 20 owner = "root"; 21 group = "root"; 22 source = "${pkgs.cnping}/bin/cnping"; 23 capabilities = "cap_net_raw+ep"; 24 }; 25 }; 26}