killsnoop.bt(8) on Linux

The text cdccc7e6ca75, as Debian 11 (Bullseye), Debian 10 (Buster) shipped it.

Trace signals issued by the kill() syscall. Uses bpftrace/eBPF.

killsnoop.bt(8) on Linux now