Beginnings of file capability (POSIX.1e draft 15) verification support

- add minimal bits and pieces to check for capabilities in files on verify
- for now, any capability set is a verification failure as the capability
  cannot have been set by rpm itself
- patch from Andreas Gruenbacher, modified to use libcap instead of raw
  xattrs for portability

1 files changed, 4 insertions, 0 deletions

diff --git a/system.h b/system.h
index e0e750f7f..5a3c64dbd 100644
--- a/system.h
+++ b/system.h
@@ -227,6 +227,10 @@ void * _free(void * p)
     return NULL;
 }
 
+#if WITH_CAP
+#include <sys/capability.h>
+#endif
+
 /**
  * Wrapper to free(3), permit NULL, return NULL. 
  * For documenting cases where const is used to protect long-lived