From fe7e29cd0a17183bb622d014b3656deb141aa02a Mon Sep 17 00:00:00 2001
From: kilyanni <github@nkilian.org>
Date: Sat, 21 Mar 2026 20:56:57 +0100
Subject: [PATCH] ccache.links: pass through hardening-related flags

Previously, wrapping a compiler that set hardeningUnsupportedFlags{,ByTargetPlatform} would swallow these flags, causing some builds to break.
---
 pkgs/by-name/cc/ccache/package.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/cc/ccache/package.nix b/pkgs/by-name/cc/ccache/package.nix
index e6943c520900..e6ad52963de3 100644
--- a/pkgs/by-name/cc/ccache/package.nix
+++ b/pkgs/by-name/cc/ccache/package.nix
@@ -121,7 +121,11 @@ stdenv.mkDerivation (finalAttrs: {
           isClang = unwrappedCC.isClang or false;
           isGNU = unwrappedCC.isGNU or false;
           isCcache = true;
-        };
+        }
+        // builtins.intersectAttrs {
+          hardeningUnsupportedFlagsByTargetPlatform = null;
+          hardeningUnsupportedFlags = null;
+        } unwrappedCC;
         lib = lib.getLib unwrappedCC;
         nativeBuildInputs = [ makeWrapper ];
         # Unwrapped clang does not have a targetPrefix because it is multi-target