No file creation events on RHEL8

[haesbaert]

RHEL8 backports tons of bpf features, the original probes were never written with 4.18.x in mind, but they almost fully work, the only thing currently failing is file creation events.

Depends on the uncomitted PR #185

[nicholasberlin]

Cause:

This commit torvalds/linux@73a09dd introduced in 4.19 added FMODE_CREATED.

Before that (obviously), FMODE_CREATED was not set on f->f_mode.

RHEL chose not to backport FMODE_CREATED, apparently.

So, this line fails: https://github.com/elastic/quark/blob/main/elastic-ebpf/GPL/Events/File/Probe.bpf.c#L289