Add ptrace(2) rule to Falco default rule set

[krisnova]

Motivation

Right now ptrace may be used to interfere with a process on a host system. The default Falco ruleset does not check for ptrace interference.

Feature

Can we add a ptrace(2) check in the default Falco rule set? This will alert if ptrace is used to interfere with a running process on a host system.

Alternatives

Additional context

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. Issues labeled "cncf", "roadmap" and "help wanted" will not be automatically closed. Please refer to a maintainer to get such label added if you think this should be kept open.