Ensure that chrome_sandbox doesn't have -rpath=$ORIGIN.

build/config/gcc/BUILD.gn

Index: build/config/gcc/BUILD.gn
diff --git a/build/config/gcc/BUILD.gn b/build/config/gcc/BUILD.gn
index 62eec11904ac93b8cf26f75e76796c0881559dcd..422ec0e92af9173212fe8eeec091a359f4f9b178 100644
--- a/build/config/gcc/BUILD.gn
+++ b/build/config/gcc/BUILD.gn
@@ -71,6 +71,10 @@ config("rpath_for_built_shared_libraries") {
 
 # Settings for executables.
 config("executable_ldconfig") {
+  # WARNING! //sandbox/linux:chrome_sandbox will not pick up this
+  # config, because it is a setuid binary that needs special flags.
+  # If you add things to this config, make sure you check to see
+  # if they should be added to that target as well.

[Dirk Pranke, 2016/06/09 00:41:49]

In theory I could split this out into two configs and have them both be applied
in BUILDCONFIG.gn, or at least have the logic all live in a single file, but we
only need this in one place and there's really only one flag that I think might
matter at all, so it seemed like overkill.

Let me know if you disagree.

   ldflags = []
   if (is_android) {
     ldflags += [