diff --git a/pkgs/build-support/cc-wrapper/add-hardening b/pkgs/build-support/cc-wrapper/add-hardening
index cd7718801ef..219aa74894c 100644
--- a/pkgs/build-support/cc-wrapper/add-hardening
+++ b/pkgs/build-support/cc-wrapper/add-hardening
@@ -8,7 +8,10 @@ if [[ "$($LD -z 2>&1)" =~ "unknown option" ]]; then
   hardeningDisable+=(bindnow relro)
 fi
 
+if [[ -n "$NIX_DEBUG" ]]; then echo HARDENING: Value of '$hardeningDisable': $hardeningDisable >&2; fi
+
 if [[ ! $hardeningDisable == "all" ]]; then
+  if [[ -n "$NIX_DEBUG" ]]; then echo 'HARDENING: Is active (not completely disabled with "all" flag)' >&2; fi
   for flag in "${hardeningFlags[@]}"
   do
     if [[ ! "${hardeningDisable[@]}" =~ "$flag" ]]; then