anchor.diff:          --replace /sbin/dmsetup ${lvm2}/sbin/dmsetup \
           --replace /bin/mount ${utillinux}/bin/mount \
           --replace /bin/umount ${utillinux}/bin/umount \
  -        --replace /sbin/unix_chkpwd /var/setuid-wrappers/unix_chkpwd \
  +        --replace /sbin/unix_chkpwd ${wrapperDir}/unix_chkpwd \
           --replace /bin/bash ${bash}/bin/bash
       done
     '';
  
positive.code: 
  stdenv.mkDerivation rec {
    name = "ecryptfs-${version}";
    version = "108";
  
    src = fetchurl {
      url = "http://launchpad.net/ecryptfs/trunk/${version}/+download/ecryptfs-utils_${version}.orig.tar.gz";
      sha256 = "1pfpzc907m4qi5h2rxmkqq072c6g22pik2rilj4bl4qishd8p0sj";
    };
  
    #TODO: replace wrapperDir below with from <nixos> config.security.wrapperDir;
    postPatch = ''
      FILES="$(grep -r '/bin/sh' src/utils -l; find src -name \*.c)"
      for file in $FILES; do
        substituteInPlace "$file" \
          --replace /sbin/mount.ecryptfs_private /var/setuid-wrappers/mount.ecryptfs_private \
          --replace /sbin/umount.ecryptfs_private /var/setuid-wrappers/umount.ecryptfs_private \
          --replace /sbin/mount.ecryptfs $out/sbin/mount.ecryptfs \
          --replace /sbin/umount.ecryptfs $out/sbin/umount.ecryptfs \
          --replace /usr/bin/ecryptfs-rewrite-file $out/bin/ecryptfs-rewrite-file \
  
negative.code: 
    meta = with stdenv.lib; {
      description = "Enterprise-class stacked cryptographic filesystem";
      license     = licenses.gpl2Plus;
      maintainers = [ maintainers.obadz ];
      platforms   = platforms.linux;
    };
  }
  