[TRACKING] Parse more syscalls args, e.g. fallocate, ftruncate, fsopen, fsmount, kexec_load etc

[incertum]

Motivation

For specialized detections we could benefit from fully supporting and parsing the following syscalls.

• fallocate CC @Molter73
• ftruncate CC @Molter73
• fsopen
• fsmount
• kexec_load

They are currently yellow / generic syscalls https://falcosecurity.github.io/libs/report/

[incertum]

/milestone TBD

[incertum]

CC @loresuso @darryk10

[incertum]

CC @ericsage here is a previous PR showing how to add new fillers https://github.com/falcosecurity/libs/pull/1242/files.

[poiana]

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale

[Andreagit97]

/remove-lifecycle stale

[poiana]

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale

[Andreagit97]

/remove-lifecycle stale