anchor.diff: -{ stdenv, buildPackages, fetchurl, flex, cracklib }:
  +{ stdenv, buildPackages, targetPlatform, fetchurl, fetchpatch, flex, cracklib }:
   
   stdenv.mkDerivation rec {
     name = "linux-pam-${version}";
  
positive.code:     url = "http://www.linux-pam.org/library/Linux-PAM-${version}.tar.bz2";
      sha256 = "1fyi04d5nsh8ivd0rn2y0z83ylgc0licz7kifbb6xxi2ylgfs6i4";
    };
  
    outputs = [ "out" "doc" "man" /* "modules" */ ];
  
  
negative.code: 
    preConfigure = ''
      configureFlags="$configureFlags --includedir=$out/include/security"
    '' + stdenv.lib.optionalString (targetPlatform.libc == "musl") ''
        # export ac_cv_search_crypt=no
        # (taken from Alpine linux, apparently insecure but also doesn't build O:))
        # disable insecure modules
        # sed -e 's/pam_rhosts//g' -i modules/Makefile.am
        sed -e 's/pam_rhosts//g' -i modules/Makefile.in
    '';
  
    meta = {
  