tiny changes in doc

Author: theop-dd

docs/cloud-workload-security/workload_protection_agent_config.md

@@ -48,7 +48,6 @@ The following settings can be configured under `runtime_security_config` in the
 
 | Environment variable | `system-probe.yaml` attribute | Type | Default | Description |
 | -------------------- | ----------------------------- | ---- | ------- | ----------- |
-| `DD_RUNTIME_SECURITY_CONFIG_EBPFLESS_ENABLED` | `runtime_security_config.ebpfless.enabled` | bool | false | EBPFLessEnabled enables the ebpfless probe |
-| `DD_RUNTIME_SECURITY_CONFIG_SYSCALLS_CAPTURE_ALL_ERRORS_ENABLED` | `runtime_security_config.syscalls.capture_all_errors.enabled` | bool | false | CaptureAllSyscallErrorsEnabled, when true, sets the eBPF load-time constant so IS_UNHANDLED_ERROR treats every negative syscall return as handled. |
+| `DD_RUNTIME_SECURITY_CONFIG_SYSCALLS_CAPTURE_ALL_ERRORS_ENABLED` | `runtime_security_config.syscalls.capture_all_errors.enabled` | bool | false | CaptureAllSyscallErrorsEnabled defines if the agent should capture all syscall errors |
 
 [1]: /security/workload_protection/

docs/cloud-workload-security/workload_protection_agent_config.schema.json

@@ -110,20 +110,11 @@
     }
   ],
   "warning_settings": [
-    {
-      "name": "EBPFLessEnabled",
-      "config_key": "runtime_security_config.ebpfless.enabled",
-      "env_var": "DD_RUNTIME_SECURITY_CONFIG_EBPFLESS_ENABLED",
-      "description": "EBPFLessEnabled enables the ebpfless probe",
-      "type": "bool",
-      "default_value": "false",
-      "visibility": "warning"
-    },
     {
       "name": "CaptureAllSyscallErrorsEnabled",
       "config_key": "runtime_security_config.syscalls.capture_all_errors.enabled",
       "env_var": "DD_RUNTIME_SECURITY_CONFIG_SYSCALLS_CAPTURE_ALL_ERRORS_ENABLED",
-      "description": "CaptureAllSyscallErrorsEnabled, when true, sets the eBPF load-time constant so IS_UNHANDLED_ERROR treats every negative syscall return as handled.",
+      "description": "CaptureAllSyscallErrorsEnabled defines if the agent should capture all syscall errors",
       "type": "bool",
       "default_value": "false",
       "visibility": "warning"

pkg/security/config/config.go

@@ -694,13 +694,13 @@ type RuntimeSecurityConfig struct {
 	// default_value: true
 	SSHUserSessionsEnabled bool
 
-	// description: CaptureAllSyscallErrorsEnabled, when true, sets the eBPF load-time constant so IS_UNHANDLED_ERROR treats every negative syscall return as handled.
+	// description: CaptureAllSyscallErrorsEnabled defines if the agent should capture all syscall errors
 	// visibility: warning
 	// default_value: false
 	CaptureAllSyscallErrorsEnabled bool
 
 	// description: EBPFLessEnabled enables the ebpfless probe
-	// visibility: warning
+	// visibility: private
 	// default_value: false
 	EBPFLessEnabled bool