nixpkgs/pkgs/tools/networking/picosnitch/default.nix
2024-08-22 03:35:31 +01:00

47 lines
1.1 KiB
Nix

{ lib
, python3
, fetchPypi
, bcc
}:
python3.pkgs.buildPythonApplication rec {
pname = "picosnitch";
version = "1.0.3";
src = fetchPypi {
inherit pname version;
sha256 = "78285e91b5c4d8e07529a34a7c3fe606acb6f950ee3cc78bb6c346bc2195b68a";
};
propagatedBuildInputs = with python3.pkgs; [
setuptools
bcc
psutil
dbus-python
requests
pandas
plotly
dash
geoip2
];
postInstall = ''
substituteInPlace $out/${python3.sitePackages}/picosnitch.py --replace '/run/picosnitch.pid' '/run/picosnitch/picosnitch.pid'
'';
pythonImportsCheck = [ "picosnitch" ];
meta = with lib; {
description = "Monitor network traffic per executable with hashing";
mainProgram = "picosnitch";
homepage = "https://github.com/elesiuta/picosnitch";
changelog = "https://github.com/elesiuta/picosnitch/releases";
license = licenses.gpl3Plus;
maintainers = [ maintainers.elesiuta ];
platforms = platforms.linux;
knownVulnerabilities = [
"Allows an unprivileged user to write to arbitrary files as root; see https://github.com/elesiuta/picosnitch/issues/40"
];
};
}