probes: split from events and add required field (#1791)

This is done through the following steps:
1. Split the probes into a separate module
2. Probes are handled implicitly through handles
3. Events have probe dependencies which includes
a handle and a required field
4. Attaching failure is handled according to the required field

cmd/tracee-ebpf/capabilities.go

@@ -2,6 +2,7 @@ package main
 
 import (
 	"fmt"
+
 	"github.com/aquasecurity/tracee/pkg/capabilities"
 	tracee "github.com/aquasecurity/tracee/pkg/ebpf"
 	"github.com/syndtr/gocapability/capability"
@@ -54,10 +55,10 @@ func generateTraceeEbpfRequiredCapabilities(OSInfo IKernelVersionInfo, cfg *trac
 
 func getCapabilitiesRequiredByTraceeEvents(cfg *tracee.Config) []capability.Cap {
 	usedEvents := cfg.Filter.EventsToTrace
-	for eventID := range tracee.CreateEssentialEventsList(cfg) {
+	for eventID := range tracee.GetEssentialEventsList(cfg) {
 		usedEvents = append(usedEvents, eventID)
 	}
-	for eventID := range tracee.GetCaptureEventsConfig(cfg) {
+	for eventID := range tracee.GetCaptureEventsList(cfg) {
 		usedEvents = append(usedEvents, eventID)
 	}
 	caps := tracee.GetCapabilitiesRequiredByEvents(usedEvents)

cmd/tracee-ebpf/main.go

@@ -191,7 +191,8 @@ func main() {
 			}
 
 			cfg.ChanEvents = make(chan trace.Event)
-			cfg.ChanErrors = make(chan error)
+			// We buffer the error channel because we may want to publish errors before we start flusing this channel
+			cfg.ChanErrors = make(chan error, 10)
 
 			t, err := tracee.New(cfg)
 			if err != nil {