anchor.diff: -{ stdenv, makeWrapper, fetchFromGitHub, gawk }:
  +{ stdenv, makeWrapper, fetchFromGitHub, gawk, installShellFiles }:
   
   stdenv.mkDerivation rec {
     pname = "lynis";
  
positive.code:     cp -r include db default.prf $out/share/lynis/
      cp -a lynis $out/bin
      wrapProgram "$out/bin/lynis" --prefix PATH : ${stdenv.lib.makeBinPath [ gawk ]}
    '';
  
    meta = with stdenv.lib; {
  
negative.code:     sha256 = "05p8h2ww4jcc6lgxrm796cbvlfmw26rxq5fmw0xxavbpadiw752j";
    };
  
    nativeBuildInputs = [ installShellFiles makeWrapper ];
  
    postPatch = ''
      grep -rl '/usr/local/lynis' ./ | xargs sed -i "s@/usr/local/lynis@$out/share/lynis@g"
  