sandbox/linux: refactor bpf_dsl dependency on die.h

sandbox/linux/bpf_dsl/verifier.cc

Index: sandbox/linux/bpf_dsl/verifier.cc
diff --git a/sandbox/linux/bpf_dsl/verifier.cc b/sandbox/linux/bpf_dsl/verifier.cc
index 417c663e306d28caa15122669b9251d0ce7a8236..a4b656f0dfec88c1813b6ff4204efdb62cb22215 100644
--- a/sandbox/linux/bpf_dsl/verifier.cc
+++ b/sandbox/linux/bpf_dsl/verifier.cc
@@ -368,12 +368,12 @@ uint32_t Verifier::EvaluateBPF(const std::vector<struct sock_filter>& program,
       case BPF_RET: {
         uint32_t r = Ret(&state, insn, err);
         switch (r & SECCOMP_RET_ACTION) {
-          case SECCOMP_RET_TRAP:
+          case SECCOMP_RET_ALLOW:
           case SECCOMP_RET_ERRNO:
+          case SECCOMP_RET_KILL:
           case SECCOMP_RET_TRACE:
-          case SECCOMP_RET_ALLOW:
+          case SECCOMP_RET_TRAP:
             break;
-          case SECCOMP_RET_KILL:     // We don't ever generate this
           case SECCOMP_RET_INVALID:  // Should never show up in BPF program
           default:
             *err = "Unexpected return code found in BPF program";