anchor.diff:  
     preConfigure = ''
       configureFlags="$configureFlags --includedir=$out/include/security"
  +  '' + stdenv.lib.optionalString (targetPlatform.libc == "musl") ''
  +      # export ac_cv_search_crypt=no
  +      # (taken from Alpine linux, apparently insecure but also doesn't build O:))
  +      # disable insecure modules
  +      # sed -e 's/pam_rhosts//g' -i modules/Makefile.am
  +      sed -e 's/pam_rhosts//g' -i modules/Makefile.in
     '';
   
     meta = {
  
positive.code:     url = "http://www.linux-pam.org/library/Linux-PAM-${version}.tar.bz2";
      sha256 = "1fyi04d5nsh8ivd0rn2y0z83ylgc0licz7kifbb6xxi2ylgfs6i4";
    };
  
    outputs = [ "out" "doc" "man" /* "modules" */ ];
  
  
negative.code: { stdenv, buildPackages, targetPlatform, fetchurl, fetchpatch, flex, cracklib }:
  
  stdenv.mkDerivation rec {
    name = "linux-pam-${version}";
  