programs/tcpdump: move to own file

This commit is contained in:
2025-07-29 00:17:53 +00:00
parent 40fc2f9b9b
commit 5aafbb0dcb
3 changed files with 9 additions and 5 deletions

View File

@@ -1179,11 +1179,6 @@ in
systemctl.sandbox.capabilities = [ "cap_dac_override" "cap_sys_admin" ];
systemctl.sandbox.keepPidsAndProc = true;
tcpdump.sandbox.net = "all";
tcpdump.sandbox.autodetectCliPaths = "existingFileOrParent";
tcpdump.sandbox.capabilities = [ "net_admin" "net_raw" ];
tcpdump.sandbox.tryKeepUsers = true;
tdesktop.persist.byStore.private = [ ".local/share/TelegramDesktop" ];
tokodon.buildCost = 1;

View File

@@ -213,6 +213,7 @@
./switchboard.nix
./syshud.nix
./tangram.nix
./tcpdump.nix
./tor-browser.nix
./tuba.nix
./unl0kr

View File

@@ -0,0 +1,8 @@
{ ... }: {
sane.programs.tcpdump = {
sandbox.net = "all";
sandbox.autodetectCliPaths = "existingFileOrParent";
sandbox.capabilities = [ "net_admin" "net_raw" ];
sandbox.tryKeepUsers = true;
};
}