Rewrite all BPF policies to use DSL API

content/common/sandbox_linux/bpf_gpu_policy_linux.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_COMMON_SANDBOX_LINUX_BPF_GPU_POLICY_LINUX_H_
 #define CONTENT_COMMON_SANDBOX_LINUX_BPF_GPU_POLICY_LINUX_H_
 
 #include <string>
 #include <vector>
 
 #include "base/callback_forward.h"
 #include "content/common/sandbox_linux/sandbox_bpf_base_policy_linux.h"
+#include "sandbox/linux/seccomp-bpf-helpers/bpf_dsl.h"
 
 namespace sandbox {
 class BrokerProcess;
 }
 
 namespace content {
 
 class GpuProcessPolicy : public SandboxBPFBasePolicy {
  public:
   GpuProcessPolicy();
   virtual ~GpuProcessPolicy();
 
-  virtual ErrorCode EvaluateSyscall(SandboxBPF* sandbox_compiler,
-                                    int system_call_number) const OVERRIDE;
+  virtual sandbox::bpf_dsl::ResultExpr EvaluateSyscall(
+      int sysno) const OVERRIDE;
 
   virtual bool PreSandboxHook() OVERRIDE;
 
  protected:
   // Start a broker process to handle open() inside the sandbox.
   // |broker_sandboxer_allocator| is a function pointer which can allocate a
   // suitable sandbox policy for the broker process itself.
   // |read_whitelist_extra| and |write_whitelist_extra| are lists of file
   // names that should be whitelisted by the broker process, in addition to
   // the basic ones.
@@ skipping 12 matching lines @@
   // vital to the process.
   // This is allocated by InitGpuBrokerProcess, called from PreSandboxHook(),
   // which executes iff the sandbox is going to be enabled afterwards.
   sandbox::BrokerProcess* broker_process_;
   DISALLOW_COPY_AND_ASSIGN(GpuProcessPolicy);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_COMMON_SANDBOX_LINUX_BPF_GPU_POLICY_LINUX_H_