From: bert hubert <ahu@ds9a.nl>

 LSM: To recap, this patch allows root_plug to work again. It needs functions
 that used to reside in capability.c but linking in capability.c, disabled
 root_plug from loading, as a security module is already present then. This
 patch splits out the functions root_plug needs from capability.c.