Ensure that chrome_sandbox doesn't have -rpath=$ORIGIN.

sandbox/linux/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/config/features.gni")
 import("//build/config/nacl/config.gni")
 import("//testing/test.gni")
 
 if (is_android) {
   import("//build/config/android/rules.gni")
@@ skipping 286 matching lines @@
 
     cflags = [
       # For ULLONG_MAX
       "-std=gnu99",
 
       # These files have a suspicious comparison.
       # TODO fix this and re-enable this warning.
       "-Wno-sign-compare",
     ]
 
+    import("//build/config/compiler/compiler.gni")
+    import("//build/config/sanitizers/sanitizers.gni")
+    if (is_component_build && !using_sanitizer) {
+      # WARNING! We remove this config so that we don't accidentally
+      # pick up the //build/config:rpath_for_built_shared_libraries
+      # sub-config. However, this means that we need to duplicate any
+      # other flags that executable_config might have.
+      configs -= [ "//build/config:executable_config" ]
+      if (!use_gold) {
+        ldflags += [ "-Wl,--disable-new-dtags" ]
+      }
+    }
+
     deps = [
       "//build/config/sanitizers:deps",
     ]
   }
 }
 
 component("sandbox_services") {
   sources = [
     "services/init_process_reaper.cc",
     "services/init_process_reaper.h",
@@ skipping 119 matching lines @@
 
 if (is_android) {
   # TODO(GYP_GONE) Delete this after we've converted everything to GN.
   group("sandbox_linux_unittests_deps") {
     testonly = true
     deps = [
       ":sandbox_linux_unittests",
     ]
   }
 }