gst_all_1.gst-plugins-bad: work around ld64 hardening issue

pkgs/development/libraries/gstreamer/bad/default.nix

@@ -112,6 +112,8 @@
   guiSupport ? false,
   gst-plugins-bad,
   apple-sdk_gstreamer,
+  # TODO: Clean up on `staging`.
+  llvmPackages,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
@@ -156,6 +158,10 @@ stdenv.mkDerivation (finalAttrs: {
   ]
   ++ lib.optionals (gst-plugins-base.waylandEnabled && stdenv.hostPlatform.isLinux) [
     wayland-scanner
+  ]
+  # TODO: Clean up on `staging`.
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    llvmPackages.lld
   ];
 
   buildInputs = [
@@ -408,6 +414,9 @@ stdenv.mkDerivation (finalAttrs: {
   # that trip up clang with format security enabled.
   hardeningDisable = [ "format" ];
 
+  # TODO: Clean up on `staging`.
+  env.NIX_CFLAGS_LINK = "-fuse-ld=lld";
+
   doCheck = false; # fails 20 out of 58 tests, expensive
 
   preFixup = ''