bpf: Gate dynptr API behind CAP_BPF

bpf: Gate dynptr API behind CAP_BPF

This has been enabled for unprivileged programs for only one kernel
release, hence the expected annoyances due to this move are low. Users
using ringbuf can stick to non-dynptr APIs. The actual use cases dynptr
is meant to serve may not make sense in unprivileged BPF programs.

Hence, gate these helpers behind CAP_BPF and limit use to privileged
BPF programs.

Fixes: 491630e5c885 ("bpf: Add bpf_dynptr_from_mem for local dynptrs")
Fixes: 3cf8258360f5 ("bpf: Dynptr support for ring buffers")
Fixes: 3ce61a9de7cf ("bpf: Add bpf_dynptr_read and bpf_dynptr_write")
Fixes: 26527b33af98 ("bpf: Add dynptr data slices")
Signed-off-by: Kumar Kartikeya Dwivedi <memxor@gmail.com>
Link: https://lore.kernel.org/r/20220921143550.30247-1-memxor@gmail.com
Acked-by: Andrii Nakryiko <andrii@kernel.org>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>