summary refs log tree commit diff
path: root/nixos/modules
diff options
context:
space:
mode:
authorMaximilian Bosch <maximilian@mbosch.me>2020-01-16 18:06:35 +0100
committerMaximilian Bosch <maximilian@mbosch.me>2020-01-16 18:09:35 +0100
commitd77b68e48709887741a3ff61c568beb9699aaac8 (patch)
treeff78f8775c9ca9fbc135c1920376d9c39301cf8f /nixos/modules
parent404d9529e1043fa0ec8459f66b3917142a889fe4 (diff)
downloadnixpkgs-d77b68e48709887741a3ff61c568beb9699aaac8.tar
nixpkgs-d77b68e48709887741a3ff61c568beb9699aaac8.tar.gz
nixpkgs-d77b68e48709887741a3ff61c568beb9699aaac8.tar.bz2
nixpkgs-d77b68e48709887741a3ff61c568beb9699aaac8.tar.lz
nixpkgs-d77b68e48709887741a3ff61c568beb9699aaac8.tar.xz
nixpkgs-d77b68e48709887741a3ff61c568beb9699aaac8.tar.zst
nixpkgs-d77b68e48709887741a3ff61c568beb9699aaac8.zip
nixos/liboping: add module
This creates setcap wrappers for oping and noping to allow unprivileged
users to use those as well.
Diffstat (limited to 'nixos/modules')
-rw-r--r--nixos/modules/module-list.nix1
-rw-r--r--nixos/modules/programs/liboping.nix22
2 files changed, 23 insertions, 0 deletions
diff --git a/nixos/modules/module-list.nix b/nixos/modules/module-list.nix
index a48434641b0..0a078fb4c79 100644
--- a/nixos/modules/module-list.nix
+++ b/nixos/modules/module-list.nix
@@ -127,6 +127,7 @@
   ./programs/java.nix
   ./programs/kbdlight.nix
   ./programs/less.nix
+  ./programs/liboping.nix
   ./programs/light.nix
   ./programs/mosh.nix
   ./programs/mininet.nix
diff --git a/nixos/modules/programs/liboping.nix b/nixos/modules/programs/liboping.nix
new file mode 100644
index 00000000000..4e4c235ccde
--- /dev/null
+++ b/nixos/modules/programs/liboping.nix
@@ -0,0 +1,22 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.programs.liboping;
+in {
+  options.programs.liboping = {
+    enable = mkEnableOption "liboping";
+  };
+  config = mkIf cfg.enable {
+    environment.systemPackages = with pkgs; [ liboping ];
+    security.wrappers = mkMerge (map (
+      exec: {
+        "${exec}" = {
+          source = "${pkgs.liboping}/bin/${exec}";
+          capabilities = "cap_net_raw+p";
+        };
+      }
+    ) [ "oping" "noping" ]);
+  };
+}