new(scripts, cmake): added support for modern bpf probe.

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

scripts/systemd/falco-modern_bpf.service

@@ -0,0 +1,23 @@
+[Unit]
+Description=Falco: Container Native Runtime Security with ebpf
+Documentation=https://falco.org/docs/
+PartOf=falco@ebpf.target
+Conflicts=falco-kmod.service
+Conflicts=falco-plugin.service
+
+[Service]
+Type=simple
+User=root
+ExecStart=/usr/bin/falco --pidfile=/var/run/falco.pid --modern-bpf
+UMask=0077
+TimeoutSec=30
+RestartSec=15s
+Restart=on-failure
+PrivateTmp=true
+NoNewPrivileges=yes
+ProtectHome=read-only
+ProtectSystem=full
+ProtectKernelTunables=true
+RestrictRealtime=true
+RestrictAddressFamilies=~AF_PACKET
+StandardOutput=null