pyrox.dev
1{
2 config,
3 lib,
4 pkgs,
5 ...
6}:
7
8let
9 cfg = config.programs.traceroute;
10in
11{
12 options = {
13 programs.traceroute = {
14 enable = lib.mkOption {
15 type = lib.types.bool;
16 default = false;
17 description = ''
18 Whether to configure a setcap wrapper for traceroute.
19 '';
20 };
21 };
22 };
23
24 config = lib.mkIf cfg.enable {
25 security.wrappers.traceroute = {
26 owner = "root";
27 group = "root";
28 capabilities = "cap_net_raw+p";
29 source = lib.getExe pkgs.traceroute;
30 };
31 };
32}