···

       
24
       
24
       
 
       
    security.wrappers.bandwhich = {

     

       
25
       
25
       
 
       
      owner = "root";

     

       
26
       
26
       
 
       
      group = "root";

     

       
27
       
27
       
-
       
      capabilities = "cap_net_raw,cap_net_admin+ep";

     

       
27
       
27
       
+
       
      capabilities = "cap_sys_ptrace,cap_dac_read_search,cap_net_raw,cap_net_admin+ep";

     

       
28
       
28
       
 
       
      source = "${pkgs.bandwhich}/bin/bandwhich";

     

       
29
       
29
       
 
       
    };

     

       
30
       
30
       
 
       
  };