anchor.diff:  
     makeFlags = "usrbin_execdir=$(bin)/bin usrsbin_execdir=$(bin)/sbin";
   
  -  # autoreconfHook is required for CVE-2016-2779
  -  nativeBuildInputs = [ pkgconfig autoreconfHook ];
  -  # libseccomp is required for CVE-2016-2779
  +  nativeBuildInputs = [ pkgconfig ];
     buildInputs =
  -    [ zlib pam libseccomp ]
  +    [ zlib pam ]
       ++ lib.optional (ncurses != null) ncurses
       ++ lib.optional (systemd != null) systemd
       ++ lib.optional (perl != null) perl;
  
positive.code: { lib, stdenv, fetchurl, pkgconfig, zlib, libseccomp, fetchpatch, autoreconfHook, ncurses ? null, perl ? null, pam, systemd, minimal ? false }:
  
  stdenv.mkDerivation rec {
    name = "util-linux-${version}";
  
negative.code:     sha256 = "1rzrmdrz51p9sy7vlw5qmj8pmqazm7hgcch5yq242mkvrikyln9c";
    };
  
    patches = [ ./rtcwake-search-PATH-for-shutdown.patch ];
  
    outputs = [ "bin" "dev" "out" "man" ];
  
  