aquasecurity/tracee

Remove return value from ebpf event message

yanivagman opened this issue · 0 comments

After we fully move to the new event structure (#2870) we should not include the return value as part of the ebpf message sent to userspace. Instead, return value should be part of the data field, and only included for events where it is actually relevant (e.g. syscalls).