anchor.diff:  # this is python3 only because setools only supports python3
   
   with lib;
  -with python3.pkgs;
   
   stdenv.mkDerivation rec {
     pname = "selinux-python";
  
positive.code:     sha256 = "1pjzsyay5535cxcjag7y7k193ajry0s0xc3dqv5905qd7cwval1n";
    };
  
    nativeBuildInputs = [ wrapPython ];
    buildInputs = [ libsepol python3 ];
    propagatedBuildInputs = [ libselinux libsemanage setools ipy ];
  
    postPatch = ''
      substituteInPlace sepolicy/Makefile --replace "echo --root" "echo --prefix"
  
negative.code:     "LOCALEDIR=$(out)/share/locale"
      "BASHCOMPLETIONDIR=$(out)/share/bash-completion/completions"
      "PYTHON=python"
      "PYTHONLIBDIR=$(out)/${python3.sitePackages}"
      "LIBSEPOLA=${lib.getLib libsepol}/lib/libsepol.a"
    ];
  
  