Fix eBPF on RHEL 9 family systems

[jakule]

Fix failed to attach to tracepoint 'syscalls/sys_exit_execve': Permission denied error that happens on RHEL 9 systems.

Background:
Our code was incorrect in the first place. As described here torvalds/linux@ba8ea72 we should be using syscall_trace_* from the very beginning. The only reason why this code used to work in the first place was the same size of trace_event_raw_sys_* and syscall_trace_* structs. When the raw version was modified or code failed to load as the provided struct had a wrong size.

Closes #35286

changelog: Fix eBPF error occuring during startup on Linux RHEL 9

[webvictim]

I compiled Teleport from master including this patch - it works fine on the same Rocky Linux 9.4 machine described in #35286

LGTM.

[jakule]

Friendly ping @fheinecke @fspmarshall

[rosstimothy]

What kind of impact does this have on other distros and kernel versions? Could this break any existing users of enhanced recording?

[jakule]

What kind of impact does this have on other distros and kernel versions? Could this break any existing users of enhanced recording?

I tested it with a few other distros that were previously not affected but this bug, but I cannot get you the guaranty that it will work with every possible Linux kernel version and every fork. This patch is based on multiple other OSS repos that were fixing the same issue.
From my point of view, this version seems to work on RHEL and Ubuntu where our current master doesn't work on any RHEL flavor now.

[webvictim]

I tried to test my binary on my existing Amazon Linux 2 box where BPF works today, but unfortunately I compiled it on a box with a newer glibc version so it won't run. I think I'd have to put it through CI to get a usable CentOS 7-built binary (not sure what that process looks like today).

If you'd like me to test it on AL2 and can provide a binary, I'm happy to.

[public-teleport-github-review-bot]

@jakule See the table below for backport results.

Branch	Result
branch/v14	Create PR
branch/v15	Create PR
branch/v16	Create PR