anchor.diff: -{ lib, stdenv, fetchurl, coreutils, pam, groff, sssd, nixosTests
  +{ lib
  +, stdenv
  +, fetchurl
  +, coreutils
  +, pam
  +, groff
  +, sssd
  +, nixosTests
   , sendmailPath ? "/run/wrappers/bin/sendmail"
   , withInsults ? false
   , withSssd ? false
  
positive.code:   ];
  
    configureFlagsArray = [
      "--with-passprompt=[sudo] password for %p: "  # intentional trailing space
    ];
  
    postConfigure =
      ''
      cat >> pathnames.h <<'EOF'
        #undef _PATH_MV
        #define _PATH_MV "${coreutils}/bin/mv"
      EOF
      makeFlags="install_uid=$(id -u) install_gid=$(id -g)"
      installFlags="sudoers_uid=$(id -u) sudoers_gid=$(id -g) sysconfdir=$out/etc rundir=$TMPDIR/dummy vardir=$TMPDIR/dummy DESTDIR=/"
      '';
  
    nativeBuildInputs = [ groff ];
  
negative.code: 
    doCheck = false; # needs root
  
    postInstall = ''
      rm $out/share/doc/sudo/ChangeLog
    '';
  
    passthru.tests = { inherit (nixosTests) sudo; };
  
  