anchor.diff:    dontPatchELF = true;
   
     buildInputs =
  -    [ gmp pkgconfig python autoreconfHook iptables ldns unbound openssl pcsclite ]
  +    [ gmp pkgconfig python autoreconfHook iptables ldns unbound openssl pcsclite systemd.dev ]
       ++ stdenv.lib.optionals enableTNC [ curl trousers sqlite libxml2 ];
   
     patches = [
  
positive.code: 
    postPatch = ''
      substituteInPlace src/libcharon/plugins/resolve/resolve_handler.c --replace "/sbin/resolvconf" "${openresolv}/sbin/resolvconf"
      '';
  
    configureFlags =
      [ "--enable-swanctl" "--enable-cmd"
        "--enable-farp" "--enable-dhcp"
        "--enable-eap-sim" "--enable-eap-sim-file" "--enable-eap-simaka-pseudonym"
        "--enable-eap-simaka-reauth" "--enable-eap-identity" "--enable-eap-md5"
  
negative.code: { stdenv, fetchurl, gmp, pkgconfig, python, autoreconfHook
  , curl, trousers, sqlite, iptables, libxml2, openresolv
  , ldns, unbound, pcsclite, openssl, systemd
  , enableTNC ? false }:
  
  stdenv.mkDerivation rec {
  