use linux/capability.h not sys/capability.h
no need for libcap-dev