anchor.diff:  
   stdenv.mkDerivation rec {
     name = "libselinux-${version}";
  -  version = "2.7";
  +  version = "2.8";
     inherit (libsepol) se_release se_url;
   
     outputs = [ "bin" "out" "dev" "man" "py" ];
   
     src = fetchurl {
       url = "${se_url}/${se_release}/libselinux-${version}.tar.gz";
  -    sha256 = "0mwcq78v6ngbq06xmb9dvilpg0jnl2vs9fgrpakhmmiskdvc1znh";
  +    sha256 = "1qc7c6lzvhs9sdgqalg1rxni3a88d989hgrw5f8i1kj3fvn9dnri";
     };
   
     nativeBuildInputs = [ pkgconfig ] ++ optionals enablePython [ swig python ];
  
positive.code: 
    installTargets = [ "install" ] ++ optional enablePython "install-pywrap";
  
    meta = removeAttrs libsepol.meta ["outputsToInstall"] // {
      description = "SELinux core library";
    };
  
negative.code:     "MAN3DIR=$(man)/share/man/man3"
      "MAN5DIR=$(man)/share/man/man5"
      "MAN8DIR=$(man)/share/man/man8"
      "SBINDIR=$(bin)/sbin"
      "SHLIBDIR=$(out)/lib"
  
  