wireshark no root

16.09.nix

{ ... }:

{
security.setuidOwners = [
  {
    program = "dumpcap";
    owner = "root";
    group = "wireshark";
    setuid = true;
    setgid = false;
    permissions = "u+rx,g+x";
  }
  ];
}

17.03.nix

{ pkgs, ... }:

{
  security.wrappers.dumpcap = {
    source = "${pkgs.wireshark}/bin/dumpcap";
    permissions = "u+xs,g+x";
    owner = "root";
    group = "wireshark";
  };
}

both.nix

{ ... }:

{
  users.extraUsers.clever.extraGroups = [ "wireshark" ];
  users.extraGroups.wireshark.gid = 500;
}