lsm: borrow lsm from LXC

Signed-off-by: Andrey Vagin <avagin@openvz.org>
process: add ability to set a security label (v3)

v2: don't change a security label, if it isn't set.
v3: handle lsm_label in local_desc_copy()

Signed-off-by: Andrey Vagin <avagin@openvz.org>
Merge pull request #21 from avagin/xemul

process: add ability to set a security label