Consider Make.defs changes by NixOS

[solardiz]

See if any of the changes from NixOS packaging of tcb by @Izorkin should be made upstream or should inspire other related changes upstream. NixOS/nixpkgs#203916

[Izorkin]

@solardiz you can add an option to change location of tcb_chkpwd file? Assumed location /run/wrappers/bin/tcb_chkpwd

[Izorkin]

Needed change \"$(LIBEXECDIR)/chkpwd/tcb_chkpwd\" to /run/wrappers/bin/tcb_chkpwd:

	$(CC) $(CFLAGS) -DCHKPWD_HELPER=\"$(LIBEXECDIR)/chkpwd/tcb_chkpwd\" \

I specify location of tcb_chkpwd via helper parameter:

  session required /nix/store/mc3j8gfm9jafs2ywy9xq96whg10fmn3k-tcb-1.2/lib/security/pam_tcb.so helper=/run/wrappers/bin/tcb_chkpwd