anchor.diff:      substituteInPlace $out/lib/systemd/system/remount-dev-exec.service \
         --replace '/bin/mount' \
                   "${util-linux}/bin/mount"
  -
  -    header "Fixing linksgx.sh"
  -    # https://github.com/intel/linux-sgx/pull/736
  -    substituteInPlace $out/aesm/linksgx.sh \
  -      --replace '/usr/bin/getent' \
  -                '${glibc.bin}/bin/getent' \
  -      --replace '/usr/sbin/usermod' \
  -                '${shadow}/bin/usermod'
     '';
   
     passthru.tests = {
  
positive.code:         hash = "sha256-JriA9UGYFkAPuCtRizk8RMM1YOYGR/eO9ILnx47A40s=";
        };
        dcap = rec {
          version = "1.12.1";
          filename = "prebuilt_dcap_${version}.tar.gz";
          prebuilt = fetchurl {
            url = "https://download.01.org/intel-sgx/sgx-dcap/${version}/linux/${filename}";
            hash = "sha256-V/XHva9Sq3P36xSW+Sd0G6Dnk4H0ANO1Ns/u+FI1eGI=";
          };
        };
      in
  
negative.code:   ];
  
    postPatch = ''
      patchShebangs \
        linux/installer/bin/build-installpkg.sh \
        linux/installer/common/psw/createTarball.sh \
  