The libcap-ng library should make programming with posix capabilities
easier. The library has some utilities to help you analyse a system
for apps that may have too much privileges.
NOTE: to distributions. There is a "make check" target. It only works
if the headers match the kernel. IOW, if you have a chroot build system
that is using a much older kernel, the macros in the kernel header files
will do the wrong thing when the capng_init function probes the kernel
and decides we are doing v1 rather than v3 protocol. If that is your case,
just don't do the "make check" as part of the build process.
While the library has Python bindings available, printing capabilities
does not work. You can still manipulate capabilities, though.
Report any bugs in this package to sgrubb@redhat.com or better yet,
file them here: https://bugzilla.redhat.com/