From 3e1cd23aeaf45c6d6458288202146e12fe5e0aba Mon Sep 17 00:00:00 2001
From: Simon Bruder <simon@sbruder.de>
Date: Wed, 4 Oct 2023 23:36:30 +0200
Subject: [PATCH] tools: Use bandwhich from unstable

---
 modules/tools.nix | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/modules/tools.nix b/modules/tools.nix
index bc0d3c0..2bd3bbd 100644
--- a/modules/tools.nix
+++ b/modules/tools.nix
@@ -3,7 +3,8 @@
 {
   programs = {
     adb.enable = pkgs.stdenv.isx86_64 && config.sbruder.full;
-    bandwhich.enable = true;
+    # TODO 23.11: use option again
+    #bandwhich.enable = true;
     iotop.enable = true;
     wireshark = {
       enable = config.sbruder.gui.enable && config.sbruder.full;
@@ -11,6 +12,14 @@
     };
   };
 
+  # TODO 23.11: see above
+  security.wrappers.bandwhich = {
+    owner = "root";
+    group = "root";
+    capabilities = "cap_net_raw,cap_net_admin+ep";
+    source = "${pkgs.unstable.bandwhich}/bin/bandwhich";
+  };
+
   environment.systemPackages = with pkgs; [
     # top like tools
     bmon # network monitor