diff --git a/hosts/common/programs/wireshark.nix b/hosts/common/programs/wireshark.nix
index b9bf5780..dcf6fc55 100644
--- a/hosts/common/programs/wireshark.nix
+++ b/hosts/common/programs/wireshark.nix
@@ -9,10 +9,7 @@ in
       "/proc/net"  #< only needed if using landlock
     ];
     fs.".config/wireshark".dir = {};
-    sandbox.extraConfig = [
-      "--sane-sandbox-cap" "net_admin"
-      "--sane-sandbox-cap" "net_raw"
-    ];
+    sandbox.capabilities = [ "net_admin" "net_raw" ];
     slowToBuild = true;
   };
 }