colin/nix-files
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

wireshark: fix security.wrappers when wireshark is disabled

Browse Source
This commit is contained in:
Colin 2024-01-22 23:58:04 +00:00
parent 5b220f3fec
commit c11f5a1401
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/common/programs/wireshark.nix
View File

@ -20,5 +20,7 @@ in
package = cfg.package;
};
# the SUID wrapper can't also be a firejail (idk why? it might be that the binary's already *too* restricted).
security.wrappers.dumpcap.source = lib.mkIf cfg.enabled (lib.mkForce "${cfg.package}/bin/.dumpcap-firejailed");
security.wrappers = lib.mkIf cfg.enabled {
dumpcap.source = lib.mkForce "${cfg.package}/bin/.dumpcap-firejailed";
};
}