Allow for building without RPATH

When building with static libraries for protobuf etc., we can allow not
setting an RPATH.

This means the resulting binary for the mysqld server has no RPATH set,
satisfying security scanners like checksec.sh.

Signed-off-by: Dirkjan Bussink <[email protected]>

Author: dbussink

CMakeLists.txt

@@ -2022,7 +2022,9 @@ IF(WITH_PROTOBUF STREQUAL "bundled" OR WITH_FIDO STREQUAL "bundled")
   # Protobuf library is a target, installed to <root>/${INSTALL_PRIV_LIBDIR}
   # INSTALL_RPATH must be set for all binaries linking with libprotobuf.
   IF(WITH_PROTOBUF STREQUAL "bundled")
-    SET(UNIX_INSTALL_RPATH_ORIGIN_PRIV_LIBDIR 1)
+    IF(NOT CMAKE_CXX_FLAGS MATCHES "-static-libgcc")
+      SET(UNIX_INSTALL_RPATH_ORIGIN_PRIV_LIBDIR 1)
+    ENDIF()
     ADD_SUBDIRECTORY(extra/protobuf)
   ENDIF()