Add domain-specific language for BPF policies

sandbox/linux/BUILD.gn

Index: sandbox/linux/BUILD.gn
diff --git a/sandbox/linux/BUILD.gn b/sandbox/linux/BUILD.gn
index d7efa73f9e5f562c232d6f5a4ccfe4650864c6aa..e867a44193489ea6feb0671efebcbef6daf6eb56 100644
--- a/sandbox/linux/BUILD.gn
+++ b/sandbox/linux/BUILD.gn
@@ -90,6 +90,7 @@ test("sandbox_linux_unittests") {
   if (use_seccomp_bpf) {
     sources += [
       "seccomp-bpf-helpers/baseline_policy_unittest.cc",
+      "seccomp-bpf-helpers/bpf_dsl_unittest.cc",
       "seccomp-bpf/bpf_tests_unittest.cc",
       "seccomp-bpf/codegen_unittest.cc",
       "seccomp-bpf/errorcode_unittest.cc",
@@ -162,6 +163,8 @@ component("seccomp_bpf_helpers") {
   sources = [
     "seccomp-bpf-helpers/baseline_policy.cc",
     "seccomp-bpf-helpers/baseline_policy.h",
+    "seccomp-bpf-helpers/bpf_dsl.cc",
+    "seccomp-bpf-helpers/bpf_dsl.h",
     "seccomp-bpf-helpers/sigsys_handlers.cc",
     "seccomp-bpf-helpers/sigsys_handlers.h",
     "seccomp-bpf-helpers/syscall_parameters_restrictions.cc",