Function( Function { head: Destructured( FunctionHeadDestructured { ellipsis: true, identifier: None, arguments: [ FunctionHeadDestructuredArgument { identifier: "config", default: None, }, FunctionHeadDestructuredArgument { identifier: "lib", default: None, }, FunctionHeadDestructuredArgument { identifier: "utils", default: None, }, FunctionHeadDestructuredArgument { identifier: "pkgs", default: None, }, ], }, ), body: With( With { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 5, column: 6, }, end: Position { line: 5, column: 9, }, }, }, ), target: LetIn( LetIn { bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "loginDefs", span: Span { start: Position { line: 19, column: 3, }, end: Position { line: 19, column: 12, }, }, }, ), ], to: IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "DEFAULT_HOME yes\n\nSYS_UID_MIN 400\nSYS_UID_MAX 999\nUID_MIN 1000\nUID_MAX 29999\n\nSYS_GID_MIN 400\nSYS_GID_MAX 999\nGID_MIN 1000\nGID_MAX 29999\n\nTTYGROUP tty\nTTYPERM 0620\n\n# Ensure privacy for newly created home directories.\nUMASK 077\n\n# Uncomment this and install chfn SUID to allow non-root\n# users to change their account GECOS information.\n# This should be made configurable.\n#CHFN_RESTRICT frwh\n\n", span: Span { start: Position { line: 21, column: 1, }, end: Position { line: 44, column: 5, }, }, }, ), ], span: Span { start: Position { line: 20, column: 5, }, end: Position { line: 44, column: 7, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "mkSetuidRoot", span: Span { start: Position { line: 46, column: 3, }, end: Position { line: 46, column: 15, }, }, }, ), ], to: Function( Function { head: Simple( FunctionHeadSimple { identifier: "source", }, ), body: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "setuid", span: Span { start: Position { line: 47, column: 7, }, end: Position { line: 47, column: 13, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 47, column: 16, }, end: Position { line: 47, column: 20, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "owner", span: Span { start: Position { line: 48, column: 7, }, end: Position { line: 48, column: 12, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "root", span: Span { start: Position { line: 48, column: 16, }, end: Position { line: 48, column: 20, }, }, }, ), ], span: Span { start: Position { line: 48, column: 15, }, end: Position { line: 48, column: 21, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "group", span: Span { start: Position { line: 49, column: 7, }, end: Position { line: 49, column: 12, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "root", span: Span { start: Position { line: 49, column: 16, }, end: Position { line: 49, column: 20, }, }, }, ), ], span: Span { start: Position { line: 49, column: 15, }, end: Position { line: 49, column: 21, }, }, }, ), }, ), Inherit( BindingInherit { from: None, attributes: [ Raw( PartRaw { content: "source", span: Span { start: Position { line: 50, column: 15, }, end: Position { line: 50, column: 21, }, }, }, ), ], span: Span { start: Position { line: 47, column: 6, }, end: Position { line: 50, column: 22, }, }, }, ), ], span: Span { start: Position { line: 47, column: 5, }, end: Position { line: 51, column: 6, }, }, }, ), span: Span { start: Position { line: 46, column: 18, }, end: Position { line: 51, column: 6, }, }, }, ), }, ), ], target: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "options", span: Span { start: Position { line: 59, column: 3, }, end: Position { line: 59, column: 10, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "users", span: Span { start: Position { line: 61, column: 5, }, end: Position { line: 61, column: 10, }, }, }, ), Raw( PartRaw { content: "defaultUserShell", span: Span { start: Position { line: 61, column: 11, }, end: Position { line: 61, column: 27, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 61, column: 30, }, end: Position { line: 61, column: 33, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mkOption", span: Span { start: Position { line: 61, column: 34, }, end: Position { line: 61, column: 42, }, }, }, ), ], default: None, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 62, column: 7, }, end: Position { line: 62, column: 18, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 62, column: 21, }, end: Position { line: 62, column: 24, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 62, column: 25, }, end: Position { line: 62, column: 30, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "This option defines the default shell assigned to user\naccounts. This can be either a full system path or a shell package.\n\nThis must not be a store path, since the path is\nused outside the store (in particular in /etc/passwd).\n", span: Span { start: Position { line: 63, column: 1, }, end: Position { line: 68, column: 7, }, }, }, ), ], span: Span { start: Position { line: 62, column: 31, }, end: Position { line: 68, column: 9, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "example", span: Span { start: Position { line: 69, column: 7, }, end: Position { line: 69, column: 14, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "literalExpression", span: Span { start: Position { line: 69, column: 17, }, end: Position { line: 69, column: 34, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "pkgs.zsh", span: Span { start: Position { line: 69, column: 36, }, end: Position { line: 69, column: 44, }, }, }, ), ], span: Span { start: Position { line: 69, column: 35, }, end: Position { line: 69, column: 45, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 70, column: 7, }, end: Position { line: 70, column: 11, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 70, column: 14, }, end: Position { line: 70, column: 19, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "either", span: Span { start: Position { line: 70, column: 20, }, end: Position { line: 70, column: 26, }, }, }, ), ], default: None, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 70, column: 27, }, end: Position { line: 70, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "path", span: Span { start: Position { line: 70, column: 33, }, end: Position { line: 70, column: 37, }, }, }, ), ], default: None, }, ), PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 70, column: 38, }, end: Position { line: 70, column: 43, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "shellPackage", span: Span { start: Position { line: 70, column: 44, }, end: Position { line: 70, column: 56, }, }, }, ), ], default: None, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 61, column: 43, }, end: Position { line: 71, column: 6, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 59, column: 13, }, end: Position { line: 73, column: 4, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "config", span: Span { start: Position { line: 78, column: 3, }, end: Position { line: 78, column: 9, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "environment", span: Span { start: Position { line: 80, column: 5, }, end: Position { line: 80, column: 16, }, }, }, ), Raw( PartRaw { content: "systemPackages", span: Span { start: Position { line: 80, column: 17, }, end: Position { line: 80, column: 31, }, }, }, ), ], to: BinaryOperation( BinaryOperation { left: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 81, column: 7, }, end: Position { line: 81, column: 10, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "optional", span: Span { start: Position { line: 81, column: 11, }, end: Position { line: 81, column: 19, }, }, }, ), ], default: None, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "config", span: Span { start: Position { line: 81, column: 20, }, end: Position { line: 81, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "users", span: Span { start: Position { line: 81, column: 27, }, end: Position { line: 81, column: 32, }, }, }, ), Raw( PartRaw { content: "mutableUsers", span: Span { start: Position { line: 81, column: 33, }, end: Position { line: 81, column: 45, }, }, }, ), ], default: None, }, ), PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 81, column: 46, }, end: Position { line: 81, column: 50, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "shadow", span: Span { start: Position { line: 81, column: 51, }, end: Position { line: 81, column: 57, }, }, }, ), ], default: None, }, ), ], }, ), operator: Concatenation, right: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 82, column: 7, }, end: Position { line: 82, column: 10, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "optional", span: Span { start: Position { line: 82, column: 11, }, end: Position { line: 82, column: 19, }, }, }, ), ], default: None, }, ), arguments: [ FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 82, column: 21, }, end: Position { line: 82, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "shellPackage", span: Span { start: Position { line: 82, column: 27, }, end: Position { line: 82, column: 39, }, }, }, ), Raw( PartRaw { content: "check", span: Span { start: Position { line: 82, column: 40, }, end: Position { line: 82, column: 45, }, }, }, ), ], default: None, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "config", span: Span { start: Position { line: 82, column: 46, }, end: Position { line: 82, column: 52, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "users", span: Span { start: Position { line: 82, column: 53, }, end: Position { line: 82, column: 58, }, }, }, ), Raw( PartRaw { content: "defaultUserShell", span: Span { start: Position { line: 82, column: 59, }, end: Position { line: 82, column: 75, }, }, }, ), ], default: None, }, ), ], }, ), PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "config", span: Span { start: Position { line: 83, column: 9, }, end: Position { line: 83, column: 15, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "users", span: Span { start: Position { line: 83, column: 16, }, end: Position { line: 83, column: 21, }, }, }, ), Raw( PartRaw { content: "defaultUserShell", span: Span { start: Position { line: 83, column: 22, }, end: Position { line: 83, column: 38, }, }, }, ), ], default: None, }, ), ], }, ), }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "environment", span: Span { start: Position { line: 85, column: 5, }, end: Position { line: 85, column: 16, }, }, }, ), Raw( PartRaw { content: "etc", span: Span { start: Position { line: 85, column: 17, }, end: Position { line: 85, column: 20, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "login.defs", span: Span { start: Position { line: 88, column: 10, }, end: Position { line: 88, column: 20, }, }, }, ), ], span: Span { start: Position { line: 88, column: 9, }, end: Position { line: 88, column: 21, }, }, }, ), }, ), Raw( PartRaw { content: "source", span: Span { start: Position { line: 88, column: 22, }, end: Position { line: 88, column: 28, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 88, column: 31, }, end: Position { line: 88, column: 35, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "writeText", span: Span { start: Position { line: 88, column: 36, }, end: Position { line: 88, column: 45, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "login.defs", span: Span { start: Position { line: 88, column: 47, }, end: Position { line: 88, column: 57, }, }, }, ), ], span: Span { start: Position { line: 88, column: 46, }, end: Position { line: 88, column: 58, }, }, }, ), Identifier( Identifier { id: "loginDefs", span: Span { start: Position { line: 88, column: 59, }, end: Position { line: 88, column: 68, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "default/useradd", span: Span { start: Position { line: 91, column: 10, }, end: Position { line: 91, column: 25, }, }, }, ), ], span: Span { start: Position { line: 91, column: 9, }, end: Position { line: 91, column: 26, }, }, }, ), }, ), Raw( PartRaw { content: "source", span: Span { start: Position { line: 91, column: 27, }, end: Position { line: 91, column: 33, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 91, column: 36, }, end: Position { line: 91, column: 40, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "writeText", span: Span { start: Position { line: 91, column: 41, }, end: Position { line: 91, column: 50, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "useradd", span: Span { start: Position { line: 91, column: 52, }, end: Position { line: 91, column: 59, }, }, }, ), ], span: Span { start: Position { line: 91, column: 51, }, end: Position { line: 91, column: 60, }, }, }, ), IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "GROUP=100\nHOME=/home\nSHELL=", span: Span { start: Position { line: 93, column: 1, }, end: Position { line: 95, column: 19, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "utils", span: Span { start: Position { line: 95, column: 21, }, end: Position { line: 95, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "toShellPath", span: Span { start: Position { line: 95, column: 27, }, end: Position { line: 95, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "config", span: Span { start: Position { line: 95, column: 39, }, end: Position { line: 95, column: 45, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "users", span: Span { start: Position { line: 95, column: 46, }, end: Position { line: 95, column: 51, }, }, }, ), Raw( PartRaw { content: "defaultUserShell", span: Span { start: Position { line: 95, column: 52, }, end: Position { line: 95, column: 68, }, }, }, ), ], default: None, }, ), ], }, ), }, ), Raw( PartRaw { content: "\n", span: Span { start: Position { line: 93, column: 1, }, end: Position { line: 96, column: 11, }, }, }, ), ], span: Span { start: Position { line: 92, column: 11, }, end: Position { line: 96, column: 13, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 86, column: 7, }, end: Position { line: 97, column: 8, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 99, column: 5, }, end: Position { line: 99, column: 13, }, }, }, ), Raw( PartRaw { content: "pam", span: Span { start: Position { line: 99, column: 14, }, end: Position { line: 99, column: 17, }, }, }, ), Raw( PartRaw { content: "services", span: Span { start: Position { line: 99, column: 18, }, end: Position { line: 99, column: 26, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "chsh", span: Span { start: Position { line: 100, column: 9, }, end: Position { line: 100, column: 13, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "rootOK", span: Span { start: Position { line: 100, column: 18, }, end: Position { line: 100, column: 24, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 100, column: 27, }, end: Position { line: 100, column: 31, }, }, }, ), }, ), ], span: Span { start: Position { line: 100, column: 16, }, end: Position { line: 100, column: 34, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "chfn", span: Span { start: Position { line: 101, column: 9, }, end: Position { line: 101, column: 13, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "rootOK", span: Span { start: Position { line: 101, column: 18, }, end: Position { line: 101, column: 24, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 101, column: 27, }, end: Position { line: 101, column: 31, }, }, }, ), }, ), ], span: Span { start: Position { line: 101, column: 16, }, end: Position { line: 101, column: 34, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "su", span: Span { start: Position { line: 102, column: 9, }, end: Position { line: 102, column: 11, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "rootOK", span: Span { start: Position { line: 102, column: 16, }, end: Position { line: 102, column: 22, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 102, column: 25, }, end: Position { line: 102, column: 29, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "forwardXAuth", span: Span { start: Position { line: 102, column: 31, }, end: Position { line: 102, column: 43, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 102, column: 46, }, end: Position { line: 102, column: 50, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "logFailures", span: Span { start: Position { line: 102, column: 52, }, end: Position { line: 102, column: 63, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 102, column: 66, }, end: Position { line: 102, column: 70, }, }, }, ), }, ), ], span: Span { start: Position { line: 102, column: 14, }, end: Position { line: 102, column: 73, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "passwd", span: Span { start: Position { line: 103, column: 9, }, end: Position { line: 103, column: 15, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [], span: Span { start: Position { line: 103, column: 18, }, end: Position { line: 103, column: 20, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "useradd", span: Span { start: Position { line: 107, column: 9, }, end: Position { line: 107, column: 16, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "rootOK", span: Span { start: Position { line: 107, column: 21, }, end: Position { line: 107, column: 27, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 107, column: 30, }, end: Position { line: 107, column: 34, }, }, }, ), }, ), ], span: Span { start: Position { line: 107, column: 19, }, end: Position { line: 107, column: 37, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "usermod", span: Span { start: Position { line: 108, column: 9, }, end: Position { line: 108, column: 16, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "rootOK", span: Span { start: Position { line: 108, column: 21, }, end: Position { line: 108, column: 27, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 108, column: 30, }, end: Position { line: 108, column: 34, }, }, }, ), }, ), ], span: Span { start: Position { line: 108, column: 19, }, end: Position { line: 108, column: 37, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "userdel", span: Span { start: Position { line: 109, column: 9, }, end: Position { line: 109, column: 16, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "rootOK", span: Span { start: Position { line: 109, column: 21, }, end: Position { line: 109, column: 27, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 109, column: 30, }, end: Position { line: 109, column: 34, }, }, }, ), }, ), ], span: Span { start: Position { line: 109, column: 19, }, end: Position { line: 109, column: 37, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "groupadd", span: Span { start: Position { line: 110, column: 9, }, end: Position { line: 110, column: 17, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "rootOK", span: Span { start: Position { line: 110, column: 22, }, end: Position { line: 110, column: 28, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 110, column: 31, }, end: Position { line: 110, column: 35, }, }, }, ), }, ), ], span: Span { start: Position { line: 110, column: 20, }, end: Position { line: 110, column: 38, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "groupmod", span: Span { start: Position { line: 111, column: 9, }, end: Position { line: 111, column: 17, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "rootOK", span: Span { start: Position { line: 111, column: 22, }, end: Position { line: 111, column: 28, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 111, column: 31, }, end: Position { line: 111, column: 35, }, }, }, ), }, ), ], span: Span { start: Position { line: 111, column: 20, }, end: Position { line: 111, column: 38, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "groupmems", span: Span { start: Position { line: 112, column: 9, }, end: Position { line: 112, column: 18, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "rootOK", span: Span { start: Position { line: 112, column: 23, }, end: Position { line: 112, column: 29, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 112, column: 32, }, end: Position { line: 112, column: 36, }, }, }, ), }, ), ], span: Span { start: Position { line: 112, column: 21, }, end: Position { line: 112, column: 39, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "groupdel", span: Span { start: Position { line: 113, column: 9, }, end: Position { line: 113, column: 17, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "rootOK", span: Span { start: Position { line: 113, column: 22, }, end: Position { line: 113, column: 28, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 113, column: 31, }, end: Position { line: 113, column: 35, }, }, }, ), }, ), ], span: Span { start: Position { line: 113, column: 20, }, end: Position { line: 113, column: 38, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "login", span: Span { start: Position { line: 114, column: 9, }, end: Position { line: 114, column: 14, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "startSession", span: Span { start: Position { line: 114, column: 19, }, end: Position { line: 114, column: 31, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 114, column: 34, }, end: Position { line: 114, column: 38, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "allowNullPassword", span: Span { start: Position { line: 114, column: 40, }, end: Position { line: 114, column: 57, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 114, column: 60, }, end: Position { line: 114, column: 64, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "showMotd", span: Span { start: Position { line: 114, column: 66, }, end: Position { line: 114, column: 74, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 114, column: 77, }, end: Position { line: 114, column: 81, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "updateWtmp", span: Span { start: Position { line: 114, column: 83, }, end: Position { line: 114, column: 93, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 114, column: 96, }, end: Position { line: 114, column: 100, }, }, }, ), }, ), ], span: Span { start: Position { line: 114, column: 17, }, end: Position { line: 114, column: 103, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "chpasswd", span: Span { start: Position { line: 115, column: 9, }, end: Position { line: 115, column: 17, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "rootOK", span: Span { start: Position { line: 115, column: 22, }, end: Position { line: 115, column: 28, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 115, column: 31, }, end: Position { line: 115, column: 35, }, }, }, ), }, ), ], span: Span { start: Position { line: 115, column: 20, }, end: Position { line: 115, column: 38, }, }, }, ), }, ), ], span: Span { start: Position { line: 100, column: 7, }, end: Position { line: 116, column: 8, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 118, column: 5, }, end: Position { line: 118, column: 13, }, }, }, ), Raw( PartRaw { content: "wrappers", span: Span { start: Position { line: 118, column: 14, }, end: Position { line: 118, column: 22, }, }, }, ), ], to: BinaryOperation( BinaryOperation { left: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "su", span: Span { start: Position { line: 119, column: 7, }, end: Position { line: 119, column: 9, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkSetuidRoot", span: Span { start: Position { line: 119, column: 19, }, end: Position { line: 119, column: 31, }, }, }, ), arguments: [ String( String_ { parts: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 119, column: 35, }, end: Position { line: 119, column: 39, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "shadow", span: Span { start: Position { line: 119, column: 40, }, end: Position { line: 119, column: 46, }, }, }, ), Raw( PartRaw { content: "su", span: Span { start: Position { line: 119, column: 47, }, end: Position { line: 119, column: 49, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/bin/su", span: Span { start: Position { line: 119, column: 33, }, end: Position { line: 119, column: 57, }, }, }, ), ], span: Span { start: Position { line: 119, column: 32, }, end: Position { line: 119, column: 58, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "sg", span: Span { start: Position { line: 120, column: 7, }, end: Position { line: 120, column: 9, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkSetuidRoot", span: Span { start: Position { line: 120, column: 19, }, end: Position { line: 120, column: 31, }, }, }, ), arguments: [ String( String_ { parts: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 120, column: 35, }, end: Position { line: 120, column: 39, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "shadow", span: Span { start: Position { line: 120, column: 40, }, end: Position { line: 120, column: 46, }, }, }, ), Raw( PartRaw { content: "out", span: Span { start: Position { line: 120, column: 47, }, end: Position { line: 120, column: 50, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/bin/sg", span: Span { start: Position { line: 120, column: 33, }, end: Position { line: 120, column: 58, }, }, }, ), ], span: Span { start: Position { line: 120, column: 32, }, end: Position { line: 120, column: 59, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "newgrp", span: Span { start: Position { line: 121, column: 7, }, end: Position { line: 121, column: 13, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkSetuidRoot", span: Span { start: Position { line: 121, column: 19, }, end: Position { line: 121, column: 31, }, }, }, ), arguments: [ String( String_ { parts: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 121, column: 35, }, end: Position { line: 121, column: 39, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "shadow", span: Span { start: Position { line: 121, column: 40, }, end: Position { line: 121, column: 46, }, }, }, ), Raw( PartRaw { content: "out", span: Span { start: Position { line: 121, column: 47, }, end: Position { line: 121, column: 50, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/bin/newgrp", span: Span { start: Position { line: 121, column: 33, }, end: Position { line: 121, column: 62, }, }, }, ), ], span: Span { start: Position { line: 121, column: 32, }, end: Position { line: 121, column: 63, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "newuidmap", span: Span { start: Position { line: 122, column: 7, }, end: Position { line: 122, column: 16, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkSetuidRoot", span: Span { start: Position { line: 122, column: 19, }, end: Position { line: 122, column: 31, }, }, }, ), arguments: [ String( String_ { parts: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 122, column: 35, }, end: Position { line: 122, column: 39, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "shadow", span: Span { start: Position { line: 122, column: 40, }, end: Position { line: 122, column: 46, }, }, }, ), Raw( PartRaw { content: "out", span: Span { start: Position { line: 122, column: 47, }, end: Position { line: 122, column: 50, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/bin/newuidmap", span: Span { start: Position { line: 122, column: 33, }, end: Position { line: 122, column: 65, }, }, }, ), ], span: Span { start: Position { line: 122, column: 32, }, end: Position { line: 122, column: 66, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "newgidmap", span: Span { start: Position { line: 123, column: 7, }, end: Position { line: 123, column: 16, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkSetuidRoot", span: Span { start: Position { line: 123, column: 19, }, end: Position { line: 123, column: 31, }, }, }, ), arguments: [ String( String_ { parts: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 123, column: 35, }, end: Position { line: 123, column: 39, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "shadow", span: Span { start: Position { line: 123, column: 40, }, end: Position { line: 123, column: 46, }, }, }, ), Raw( PartRaw { content: "out", span: Span { start: Position { line: 123, column: 47, }, end: Position { line: 123, column: 50, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/bin/newgidmap", span: Span { start: Position { line: 123, column: 33, }, end: Position { line: 123, column: 65, }, }, }, ), ], span: Span { start: Position { line: 123, column: 32, }, end: Position { line: 123, column: 66, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 118, column: 25, }, end: Position { line: 124, column: 6, }, }, }, ), operator: Update, right: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 124, column: 10, }, end: Position { line: 124, column: 13, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "optionalAttrs", span: Span { start: Position { line: 124, column: 14, }, end: Position { line: 124, column: 27, }, }, }, ), ], default: None, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "config", span: Span { start: Position { line: 124, column: 28, }, end: Position { line: 124, column: 34, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "users", span: Span { start: Position { line: 124, column: 35, }, end: Position { line: 124, column: 40, }, }, }, ), Raw( PartRaw { content: "mutableUsers", span: Span { start: Position { line: 124, column: 41, }, end: Position { line: 124, column: 53, }, }, }, ), ], default: None, }, ), Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "chsh", span: Span { start: Position { line: 125, column: 7, }, end: Position { line: 125, column: 11, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkSetuidRoot", span: Span { start: Position { line: 125, column: 16, }, end: Position { line: 125, column: 28, }, }, }, ), arguments: [ String( String_ { parts: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 125, column: 32, }, end: Position { line: 125, column: 36, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "shadow", span: Span { start: Position { line: 125, column: 37, }, end: Position { line: 125, column: 43, }, }, }, ), Raw( PartRaw { content: "out", span: Span { start: Position { line: 125, column: 44, }, end: Position { line: 125, column: 47, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/bin/chsh", span: Span { start: Position { line: 125, column: 30, }, end: Position { line: 125, column: 57, }, }, }, ), ], span: Span { start: Position { line: 125, column: 29, }, end: Position { line: 125, column: 58, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "passwd", span: Span { start: Position { line: 126, column: 7, }, end: Position { line: 126, column: 13, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkSetuidRoot", span: Span { start: Position { line: 126, column: 16, }, end: Position { line: 126, column: 28, }, }, }, ), arguments: [ String( String_ { parts: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 126, column: 32, }, end: Position { line: 126, column: 36, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "shadow", span: Span { start: Position { line: 126, column: 37, }, end: Position { line: 126, column: 43, }, }, }, ), Raw( PartRaw { content: "out", span: Span { start: Position { line: 126, column: 44, }, end: Position { line: 126, column: 47, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/bin/passwd", span: Span { start: Position { line: 126, column: 30, }, end: Position { line: 126, column: 59, }, }, }, ), ], span: Span { start: Position { line: 126, column: 29, }, end: Position { line: 126, column: 60, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 124, column: 54, }, end: Position { line: 127, column: 6, }, }, }, ), ], }, ), }, ), }, ), ], span: Span { start: Position { line: 78, column: 12, }, end: Position { line: 128, column: 4, }, }, }, ), }, ), ], span: Span { start: Position { line: 55, column: 1, }, end: Position { line: 129, column: 2, }, }, }, ), span: Span { start: Position { line: 7, column: 1, }, end: Position { line: 129, column: 2, }, }, }, ), span: Span { start: Position { line: 5, column: 1, }, end: Position { line: 129, column: 2, }, }, }, ), span: Span { start: Position { line: 3, column: 1, }, end: Position { line: 129, column: 2, }, }, }, )