feat : process arguments matching

[Aryan-sharma11]

Purpose of PR?:

This PR Introduces argument based matching for processes.

###Design

Maps
bpf maps

in user space we will keep track of arguments list using

ArgumentsList        map[ArgListKey][]string 
  type ArgListKey struct {
	  NsKey
	  InnerKey
  }

Policy example

apiVersion: security.kubearmor.com/v1
kind: KubeArmorPolicy
metadata:
  name: allow-steampipe-args
spec:
  selector:
    matchLabels:
      app: steampipe
  process:
    matchPaths:
    - path: /usr/bin/python3.6
      allowedArgs:
        - -m
        - modules.steampipe_aws
    matchDirectories:
    - dir: /tmp/
  action:
    Block

new BPF maps added
ArgsStore => to store commandline arguments
CmdArgsBuf => to store value for ArgsStore map

kubearmor_arguments => to store the arguments provided with the policy
args_bufK => to store key for kubearmor_arguments map

Benchmarking

-- current stable
https://hackmd.io/@aryan1126/H1B_gLyZ1x
-- with process args matching
https://hackmd.io/@aryan1126/ryq0xIy-kl

Does this PR introduce a breaking change?

If the changes in this PR are manually verified, list down the scenarios covered::

Additional information for reviewer? :
Mention if this PR is part of any design or a continuation of previous PRs

Checklist:

• Bug fix. Fixes #
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• This change requires a documentation update
• PR Title follows the convention of <type>(<scope>): <subject>
• Commit has unit tests
• Commit has integration tests

[rootxrishabh]

BPFLSM enforcer not starting, here's the error message -

2024-11-12 10:39:53.824274 ERROR error creating kubearmor_arguments_map: creating map: map create: argument list too long (without BTF k/v) github.com/kubearmor/KubeArmor/KubeArmor/log.Err /usr/src/KubeArmor/KubeArmor/log/logger.go:103 github.com/kubearmor/KubeArmor/KubeArmor/feeder.(*Feeder).Errf /usr/src/KubeArmor/KubeArmor/feeder/feeder.go:446 github.com/kubearmor/KubeArmor/KubeArmor/enforcer/bpflsm.NewBPFEnforcer /usr/src/KubeArmor/KubeArmor/enforcer/bpflsm/enforcer.go:111 github.com/kubearmor/KubeArmor/KubeArmor/enforcer.selectLsm /usr/src/KubeArmor/KubeArmor/enforcer/runtimeEnforcer.go:106 github.com/kubearmor/KubeArmor/KubeArmor/enforcer.NewRuntimeEnforcer /usr/src/KubeArmor/KubeArmor/enforcer/runtimeEnforcer.go:175 github.com/kubearmor/KubeArmor/KubeArmor/core.(*KubeArmorDaemon).InitRuntimeEnforcer /usr/src/KubeArmor/KubeArmor/core/kubeArmor.go:292 github.com/kubearmor/KubeArmor/KubeArmor/core.KubeArmor /usr/src/KubeArmor/KubeArmor/core/kubeArmor.go:548 main.main /usr/src/KubeArmor/KubeArmor/main.go:79 runtime.main /usr/local/go/src/runtime/proc.go:271 2024-11-12 10:39:53.824329 INFO Error Initialising BPF-LSM Enforcer, Cleaning Up

Environment -

• K8s -> EKS
• Container Runtime -> containerd://1.7.22
• Kernel Version -> 5.10.227-219.884.amzn2.x86_64
• Operating system -> Amazon Linux 2