new(events/syscall): system user interactive

Signed-off-by: Leonardo Grasso <me@leonardograsso.com>

events/syscall/system_user_interactive.go

@@ -0,0 +1,22 @@
+// +build linux
+
+package syscall
+
+import (
+	"os/exec"
+
+	"github.com/falcosecurity/event-generator/events"
+)
+
+var _ = events.Register(SystemUserInteractive)
+
+func SystemUserInteractive(h events.Helper) error {
+	err := runAsUser(h, "daemon", "/bin/login")
+
+	// silently ignore /bin/login exit status 1
+	if exitErr, isExitErr := err.(*exec.ExitError); isExitErr {
+		h.Log().WithError(exitErr).Debug("silently ignore exit status")
+		return nil
+	}
+	return err
+}