kernel-security/ptrace: support new gdb error message
To determine if ptrace() is allowed or not ptrace-restrictions.sh is
checking the error message returned by gdb. However newer versions of
gdb (in impish) changed the error string from 'Operation not permitted'
to 'Inappropriate ioctl for device', but the result is still the same.
Make sure to recognize both strings to prevent false positive failures.
Signed-off-by: Andrea Righi <email address hidden>
test-kernel-security: CONFIG_STRICT_KERNEL_RWX supported for ppc64el in 5.13+
Starting with Linux 5.13 ppc64el supports CONFIG_STRICT_KERNEL_RWX.
With this, all archictures for any suppored Ubuntu kernel have strict
RWX support for at least some kernel versions, so we can get rid of
the supported architecture check. Replace that with checks to expect
strict RWX support in 5.13+ for ppc64el.
test-kernel-security: update for new unprivileged_bpf_disabled sysctl value in 5.13
Upstream commit 08389d888287 ("bpf: Add kconfig knob for disabling
unpriv bpf by default") adds support for disabling unprivileged bpf by
default while allowing a system administrator to enable it. The 5.13
kernel for Ubuntu has enabled this feature. With this in place the
sysctl will have a value of 2, so update the test to expect this
value.
