anchor.diff:  { stdenv, lib, rustPlatform, fetchgit
  -, pkg-config, wayland-scanner
  +, minijail-tools, pkg-config, wayland-scanner
   , libcap, libdrm, libepoxy, minijail, virglrenderer, wayland, wayland-protocols
   , linux
   }:
  
positive.code: 
      postPatch = ''
        cp ${./Cargo.lock} Cargo.lock
        sed -i "s|/usr/share/policy/crosvm/|$out/share/policy/|g" \
               seccomp/*/*.policy
      '';
  
      preBuild = ''
        export DEFAULT_SECCOMP_POLICY_DIR=$out/share/policy
      '';
  
      buildFeatures = [ "default" "virgl_renderer" "virgl_renderer_next" ];
  
      postInstall = ''
        mkdir -p $out/share/policy/
        cp seccomp/${arch}/* $out/share/policy/
      '';
  
      CROSVM_CARGO_TEST_KERNEL_BINARY =
  
negative.code: 
      cargoLock.lockFile = ./Cargo.lock;
  
      nativeBuildInputs = [ minijail-tools pkg-config wayland-scanner ];
  
      buildInputs = [
        libcap libdrm libepoxy minijail virglrenderer wayland wayland-protocols
  