anchor.diff:        src = ./fix-paths.patch;
         inherit openfortivpn;
       })
  +
       # Don't use etc/dbus-1/system.d
       (fetchpatch {
         url = "https://gitlab.gnome.org/GNOME/NetworkManager-fortisslvpn/merge_requests/11.patch";
  
positive.code: { stdenv, fetchurl, substituteAll, openfortivpn, intltool, pkgconfig, file, gtk3,
  networkmanager, ppp, libsecret, withGnome ? true, gnome3, fetchpatch, libnma }:
  
  let
    pname = "NetworkManager-fortisslvpn";
    version = "1.2.10";
  in stdenv.mkDerivation {
    name = "${pname}${if withGnome then "-gnome" else ""}-${version}";
  
    src = fetchurl {
  
negative.code:     })
    ];
  
    nativeBuildInputs = [
      intltool
      pkg-config
      file
    ];
  
    buildInputs = [
      openfortivpn
      networkmanager
      ppp
    ] ++ stdenv.lib.optionals withGnome [
      gtk3
      libsecret
      libnma
    ];
  
    configureFlags = [
      "--without-libnm-glib"
  