chore(scripts): added support for falco@plugin.target.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

scripts/systemd/falco-ebpf.service

@@ -3,6 +3,7 @@ Description=Falco: Container Native Runtime Security with ebpf
 Documentation=https://falco.org/docs/
 PartOf=falco@ebpf.target
 Conflicts=falco-kmod.service
+Conflicts=falco-plugin.service
 
 [Service]
 Type=simple

scripts/systemd/falco-kmod.service

@@ -5,6 +5,7 @@ After=falco-kmod-inject.service
 Requires=falco-kmod-inject.service
 PartOf=falco@kmod.target
 Conflicts=falco-ebpf.service
+Conflicts=falco-plugin.service
 
 [Service]
 Type=simple

scripts/systemd/falco-plugin.service

@@ -0,0 +1,23 @@
+[Unit]
+Description=Falco: Container Native Runtime Security with plugin
+Documentation=https://falco.org/docs/
+PartOf=falco@plugin.target
+Conflicts=falco-kmod.service
+Conflicts=falco-ebpf.service
+
+[Service]
+Type=simple
+User=%u
+ExecStart=/usr/bin/falco --pidfile=/var/run/falco.pid
+UMask=0077
+TimeoutSec=30
+RestartSec=15s
+Restart=on-failure
+PrivateTmp=true
+NoNewPrivileges=yes
+ProtectHome=read-only
+ProtectSystem=full
+ProtectKernelTunables=true
+RestrictRealtime=true
+RestrictAddressFamilies=~AF_PACKET
+StandardOutput=null