diff --git a/nixos/modules/programs/cnping.nix b/nixos/modules/programs/cnping.nix
index 92e033d0b7dc..28fa89d1e56f 100644
--- a/nixos/modules/programs/cnping.nix
+++ b/nixos/modules/programs/cnping.nix
@@ -17,6 +17,8 @@ in
 
   config = lib.mkIf cfg.enable {
     security.wrappers.cnping = {
+      owner = "root";
+      group = "root";
       source = "${pkgs.cnping}/bin/cnping";
       capabilities = "cap_net_raw+ep";
     };