anchor.diff:          hardening_unsupported_flags+=" relro"
         fi
   
  -      substituteAll ${./add-flags.sh} $out/nix-support/add-flags.sh
  -      substituteAll ${./add-hardening.sh} $out/nix-support/add-hardening.sh
  -      cp -p ${./utils.sh} $out/nix-support/utils.sh
  +      substituteAll ${preWrap ./add-flags.sh} $out/nix-support/add-flags.sh
  +      substituteAll ${preWrap ./add-hardening.sh} $out/nix-support/add-hardening.sh
  +      cp -p ${preWrap ./utils.sh} $out/nix-support/utils.sh
       ''
       + extraBuildCommands;
   
  
positive.code: , dyld ? null # TODO: should this be a setup-hook on dyld?
  , isGNU ? false, isClang ? cc.isClang or false, gnugrep ? null
  , hostPlatform, targetPlatform
  }:
  
  with stdenv.lib;
  
negative.code:     ''
  
      + ''
        substituteAll ${preWrap ./setup-hook.sh} $out/nix-support/setup-hook.tmp
        cat $out/nix-support/setup-hook.tmp >> $out/nix-support/setup-hook
        rm $out/nix-support/setup-hook.tmp
  
  