# Install libcap-ng with Homebrew, apk, apt, dnf, Nix, pacman, zypper Library for Linux that makes using posix capabilities easy. Version 0.9.3 via Homebrew; verified 2026-04-09. ## Install ```sh sudo av install brew:libcap-ng ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install libcap-ng ``` Evidence: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add libcap-ng ``` Evidence: Alpine Linux edge package indexes: libcap-ng from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install libcap-ng-dev ``` Evidence: Debian stable package indexes: libcap-ng-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install libcap-ng ``` Evidence: Fedora Rawhide package metadata: libcap-ng from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#libcap_ng ``` Evidence: nixpkgs package indexes: pkgs/by-name/li/libcap_ng/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S libcap-ng ``` Evidence: Arch Linux sync databases: libcap-ng from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz - zypper (92%): ```sh sudo zypper install libcap-ng-devel ``` Evidence: openSUSE Tumbleweed package metadata: libcap-ng-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## Package facts - **Package key:** brew:libcap-ng - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.9.3 - **Source summary:** Library for Linux that makes using posix capabilities easy - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** LGPL-2.1-or-later AND GPL-2.0-or-later - **Source archive:** - **Last updated:** 2026-04-09T18:24:44Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - filecap (cli) - netcap (cli) - pscap (cli) - filecap (alias) - netcap (alias) - pscap (alias) ## Build dependencies - autoconf - automake - libtool - m4 - pkgconf - python-setuptools - python@3.14 - swig ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 0.9.3 - Package-manager updated: 2026-04-09 - Local data: ok - Upstream repository: https://github.com/stevegrubb/libcap-ng - Upstream latest detected: v0.9.3 (current) ## Project history and usage libcap-ng is Steve Grubb's Linux capability library and utility suite, designed to make POSIX capability programming easier than the older libcap API. ### Project history The libcap-ng site states the design goal directly: make programming with POSIX capabilities easier than the traditional libcap library. Its README demonstrates common use cases such as dropping all capabilities, keeping selected capabilities, checking capability state, and retaining capabilities across UID changes. The project paired the C library with administrative tools. netcap reports listening network processes and their capabilities, pscap reports privileged processes, filecap searches for files with file capabilities, and cap-audit can audit capability checks when built with the optional eBPF-based tooling. ### Adoption history libcap-ng was adopted by Linux distributions because it gives application developers and packagers a smaller API for privilege dropping, while giving administrators tools to inspect capability exposure across a running system. ### How it is used Developers use capng_clear, capng_update, capng_apply, and related calls to drop or retain Linux capabilities. Administrators use pscap, netcap, and filecap to find over-privileged processes and files. ### Why package nerds care In package-manager terms, libcap-ng is a security plumbing package: it is rarely user-facing, but it makes least-privilege patches shorter and more reviewable. That is exactly the kind of small library that changes whether downstream packages actually drop privileges. ### Timeline - 0.4: Initial public release, according to the upstream ChangeLog. - 0.6: Added Python bindings and an m4 macro for autotools consumers. - 0.8: Added ambient capability support and V3 filesystem capability support. - 2024-04-09: The project site listed libcap-ng 0.8.5 release files. - 0.9: The README documents a distribution move away from people.redhat.com release hosting to the GitHub page. ### Related projects - Related projects include libcap, Linux capabilities, file capabilities, procfs capability inspection, systemd ambient capabilities, and eBPF-based capability auditing. ### Sources - - - - - ## Security Notes library-like package without higher-risk signals. - **Geiger risk:** green / low - library-like package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** libcap-ng - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Requirements:** linux - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - libcap-ng-dev - 0.8.5-4+b1: normalized package name match | Debian stable package indexes: libcap-ng-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Development and header files for libcap-ng | https://people.redhat.com/sgrubb/libcap-ng - Debian apt - libcap-ng-utils - 0.8.5-4+b1: normalized package name match | Debian stable package indexes: libcap-ng-utils from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Utilities for analysing and setting file capabilities | https://people.redhat.com/sgrubb/libcap-ng - Debian apt - libcap-ng0 - 0.8.5-4+b1: normalized package name match | Debian stable package indexes: libcap-ng0 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | alternate POSIX capabilities library | https://people.redhat.com/sgrubb/libcap-ng - Debian apt - python3-cap-ng - 0.8.5-4+b1: normalized package name match | Debian stable package indexes: python3-cap-ng from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Python3 bindings for libcap-ng | https://people.redhat.com/sgrubb/libcap-ng - Nix - libcap_ng: normalized package name match | nixpkgs package indexes: pkgs/by-name/li/libcap_ng/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - libcap-ng-dev - 0.8.4-2build2: normalized package name match | Ubuntu 24.04 LTS package indexes: libcap-ng-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Development and header files for libcap-ng | https://people.redhat.com/sgrubb/libcap-ng - Ubuntu apt - libcap-ng-utils - 0.8.4-2build2: normalized package name match | Ubuntu 24.04 LTS package indexes: libcap-ng-utils from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Utilities for analysing and setting file capabilities | https://people.redhat.com/sgrubb/libcap-ng - Ubuntu apt - libcap-ng0 - 0.8.4-2build2: normalized package name match | Ubuntu 24.04 LTS package indexes: libcap-ng0 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | alternate POSIX capabilities library | https://people.redhat.com/sgrubb/libcap-ng - Ubuntu apt - python3-cap-ng - 0.8.4-2build2: normalized package name match | Ubuntu 24.04 LTS package indexes: python3-cap-ng from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Python3 bindings for libcap-ng | https://people.redhat.com/sgrubb/libcap-ng - apk - libcap-ng - 0.8.5-r2: normalized package name match | Alpine Linux edge package indexes: libcap-ng from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | POSIX capabilities library | https://people.redhat.com/sgrubb/libcap-ng/index.html - apk - libcap-ng-dev - 0.8.5-r2: normalized package name match | Alpine Linux edge package indexes: libcap-ng-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | POSIX capabilities library (development files) | https://people.redhat.com/sgrubb/libcap-ng/index.html - apk - libcap-ng-doc - 0.8.5-r2: normalized package name match | Alpine Linux edge package indexes: libcap-ng-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | POSIX capabilities library (documentation) | https://people.redhat.com/sgrubb/libcap-ng/index.html - apk - libcap-ng-static - 0.8.5-r2: normalized package name match | Alpine Linux edge package indexes: libcap-ng-static from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | POSIX capabilities library (static library) | https://people.redhat.com/sgrubb/libcap-ng/index.html - apk - libcap-ng-utils - 0.8.5-r2: normalized package name match | Alpine Linux edge package indexes: libcap-ng-utils from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | posix capabilities utils | https://people.redhat.com/sgrubb/libcap-ng/index.html - apk - py3-libcap-ng - 0.8.5-r2: normalized package name match | Alpine Linux edge package indexes: py3-libcap-ng from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | python bindings for libcap-ng | https://people.redhat.com/sgrubb/libcap-ng/index.html - dnf - libcap-ng - 0.9.3-2.fc45: normalized package name match | Fedora Rawhide package metadata: libcap-ng from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Alternate posix capabilities library | https://github.com/stevegrubb/libcap-ng ## Related links - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider. - [autoconf](https://www.automicvault.com/pkg/brew/autoconf/) - Build dependency declared by Homebrew. - [automake](https://www.automicvault.com/pkg/brew/automake/) - Build dependency declared by Homebrew. - [libtool](https://www.automicvault.com/pkg/brew/libtool/) - Build dependency declared by Homebrew. - [m4](https://www.automicvault.com/pkg/brew/m4/) - Build dependency declared by Homebrew. - [libcap](https://www.automicvault.com/pkg/brew/libcap/) - Shares av.db curated category or tags: cli, library, linux, linux-capabilities, permissions. - [botan](https://www.automicvault.com/pkg/brew/botan/) - Shares av.db curated category or tags: cli, library, security. - [cracklib](https://www.automicvault.com/pkg/brew/cracklib/) - Shares av.db curated category or tags: cli, library, security. - [cyrus-sasl](https://www.automicvault.com/pkg/brew/cyrus-sasl/) - Shares av.db curated category or tags: cli, library, security. - [gnutls](https://www.automicvault.com/pkg/brew/gnutls/) - Shares av.db curated category or tags: cli, library, security. - [linux-pam](https://www.automicvault.com/pkg/brew/linux-pam/) - Shares av.db curated category or tags: cli, linux, security. - [opensaml](https://www.automicvault.com/pkg/brew/opensaml/) - Shares av.db curated category or tags: cli, library, security. - [opensc](https://www.automicvault.com/pkg/brew/opensc/) - Shares av.db curated category or tags: cli, library, security. - [bubblewrap](https://www.automicvault.com/pkg/brew/bubblewrap/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, libcap, linux, security. - [git-credential-oauth](https://www.automicvault.com/pkg/brew/git-credential-oauth/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, security, that, using. ## Combined YAML source View the package source record on GitHub. [combined/libcap-ng.yml](https://github.com/automic-vault/db/blob/main/combined/libcap-ng.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph