LSM: Move the definition of capable() into sched.h if CONFIG_SECURITY is set to help

make the #include nightmare more managable.

include/linux/sched.h

@@ -540,8 +540,10 @@ static inline int sas_ss_flags(unsigned long sp)
 }
 
 
-#ifndef CONFIG_SECURITY
-/* capable prototype and code are in security.[hc] if CONFIG_SECURITY */
+#ifdef CONFIG_SECURITY
+/* code is in security.c */
+extern int capable(int cap);
+#else
 static inline int capable(int cap)
 {
 	if (cap_raised(current->cap_effective, cap)) {

include/linux/security.h

@@ -1371,7 +1371,6 @@ extern int register_security	(struct security_operations *ops);
 extern int unregister_security	(struct security_operations *ops);
 extern int mod_reg_security	(const char *name, struct security_operations *ops);
 extern int mod_unreg_security	(const char *name, struct security_operations *ops);
-extern int capable		(int cap);
 
 
 #else /* CONFIG_SECURITY */