Rewrite all BPF policies to use DSL API

components/nacl/loader/nonsfi/nonsfi_sandbox.h

Index: components/nacl/loader/nonsfi/nonsfi_sandbox.h
diff --git a/components/nacl/loader/nonsfi/nonsfi_sandbox.h b/components/nacl/loader/nonsfi/nonsfi_sandbox.h
index 6ff0d4112d946ec8755c050506aefb2fe6ce8816..48cc7ad503ae4c7d68b63786b90d5e7105f2aeae 100644
--- a/components/nacl/loader/nonsfi/nonsfi_sandbox.h
+++ b/components/nacl/loader/nonsfi/nonsfi_sandbox.h
@@ -6,7 +6,7 @@
 #define COMPONENTS_NACL_LOADER_NONSFI_NONSFI_SANDBOX_H_
 
 #include "base/basictypes.h"
-#include "sandbox/linux/seccomp-bpf/sandbox_bpf_policy.h"
+#include "sandbox/linux/seccomp-bpf-helpers/bpf_dsl.h"
 
 namespace nacl {
 namespace nonsfi {
@@ -14,13 +14,14 @@ namespace nonsfi {
 // The seccomp sandbox policy for NaCl non-SFI mode. Note that this
 // policy must be as strong as possible, as non-SFI mode heavily
 // depends on seccomp sandbox.
-class NaClNonSfiBPFSandboxPolicy : public sandbox::SandboxBPFPolicy {
+class NaClNonSfiBPFSandboxPolicy
+    : public sandbox::bpf_dsl::SandboxBPFPolicyDSL {
  public:
   explicit NaClNonSfiBPFSandboxPolicy() {}
   virtual ~NaClNonSfiBPFSandboxPolicy() {}
 
-  virtual sandbox::ErrorCode EvaluateSyscall(sandbox::SandboxBPF* sb,
-                                             int sysno) const OVERRIDE;
+  virtual sandbox::bpf_dsl::ResultExpr EvaluateSyscall(
+      int sysno) const OVERRIDE;
 
  private:
   DISALLOW_COPY_AND_ASSIGN(NaClNonSfiBPFSandboxPolicy);