eBPF ring buffer as a covert side channel

Two unprivileged processes sharing a map can modulate ring-buffer pressure to signal a few bits per second. Low bandwidth, but it exists — and it costs no capabilities to build.