diff --git a/nixos/modules/security/setcap-wrappers.nix b/nixos/modules/security/setcap-wrappers.nix index faebc6f7e0d..b8383d81358 100644 --- a/nixos/modules/security/setcap-wrappers.nix +++ b/nixos/modules/security/setcap-wrappers.nix @@ -48,10 +48,9 @@ in type = types.listOf types.attrs; default = []; example = - [ { program = "sendmail"; - source = "${pkgs.sendmail.bin}/bin/sendmail"; + [ { program = "ping"; owner = "nobody"; - group = "postdrop"; + group = "nogroup"; setcap = true; capabilities = "cap_net_raw+ep"; }