anchor.diff:    ];
   
     buildInputs = [
  -    python3
       libcap-ng
     ] ++ optionals (!libOnly) [
       audit_lib
  
positive.code: , libcap-ng
  , ncurses
  , pam
  , python3
  , readline
  , systemd_lib
  , zlib
  
negative.code:     "--enable-newgrp"
      "--enable-write"
      "--without-smack"
      #"--with-python"  # Only needed for libmount bindings
      # Make a separate python package for this if needed
      "--enable-fs-paths-default=/var/setuid-wrappers:/run/current-system/sw/bin:/sbin:/bin"
      "--disable-use-tty-group"
    ] ++ (if libOnly then [
  