sandbox/linux: refactor bpf_dsl dependency on die.h

sandbox/linux/seccomp-bpf/errorcode.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_LINUX_SECCOMP_BPF_ERRORCODE_H__
 #define SANDBOX_LINUX_SECCOMP_BPF_ERRORCODE_H__
 
 #include "sandbox/linux/seccomp-bpf/trap.h"
 #include "sandbox/sandbox_export.h"
 
@@ skipping 20 matching lines @@
     // Allow this system call. The value of ERR_ALLOWED is pretty much
     // completely arbitrary. But we want to pick it so that is is unlikely
     // to be passed in accidentally, when the user intended to return an
     // "errno" (see below) value instead.
     ERR_ALLOWED = 0x04000000,
 
     // If the progress is being ptraced with PTRACE_O_TRACESECCOMP, then the
     // tracer will be notified of a PTRACE_EVENT_SECCOMP and allowed to change
     // or skip the system call.  The lower 16 bits of err will be available to
     // the tracer via PTRACE_GETEVENTMSG.
-    ERR_TRACE   = 0x08000000,
+    ERR_TRACE = 0x08000000,
+
+    // Kill the process immediately.
+    ERR_KILL = 0x10000000,
 
     // Deny the system call with a particular "errno" value.
     // N.B.: It is also possible to return "0" here. That would normally
     //       indicate success, but it won't actually run the system call.
     //       This is very different from return ERR_ALLOWED.
     ERR_MIN_ERRNO = 0,
 #if defined(__mips__)
     // MIPS only supports errno up to 1133
     ERR_MAX_ERRNO = 1133,
 #else
@@ skipping 142 matching lines @@
 
   // 32bit field used for all possible types of ErrorCode values. This is
   // the value that uniquely identifies any ErrorCode and it (typically) can
   // be emitted directly into a BPF filter program.
   uint32_t err_;
 };
 
 }  // namespace sandbox
 
 #endif  // SANDBOX_LINUX_SECCOMP_BPF_ERRORCODE_H__