Add domain-specific language for BPF policies

Add domain-specific language for BPF policies

This CL adds basic support for equality testing of system call
arguments, and conjunctive and disjunctive combinations of tests.

Reland of https://codereview.chromium.org/299743002/

BUG=375497
Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=283687

[mdempsky, 2014-07-16 20:35:00]

Using Syscall::Call() to directly invoke the system calls seems to have fixed
linux_rel_precise32.

[jln (very slow on Chromium), 2014-07-16 23:13:25]

lgtm

Please add a link to the original CL in the commit message mentioning that it is
a re-land.

[mdempsky, 2014-07-16 23:16:55]

The CQ bit was checked by mdempsky@chromium.org

[mdempsky, 2014-07-16 23:17:03]

On 2014/07/16 23:13:25, jln wrote:
> Please add a link to the original CL in the commit message mentioning that it
is
> a re-land.

Done.

[commit-bot: I haz the power, 2014-07-16 23:19:49]

CQ is trying da patch. Follow status at
 https://chromium-status.appspot.com/cq/mdempsky@chromium.org/396323002/40001

[commit-bot: I haz the power, 2014-07-17 07:25:07]

Change committed as 283687