How to get file capabilities in Linux using C/C++ with other method than system() system call?

Question

I have a task to fulfil and part of it is to get certain file capabilities and check if they are set correctly using C/C++. I want to make sure that certain file has cap_new_raw+ep capability. What would be other way of achieving it than using system(get_cap file) and reading output (not returning value, output)?

Answer 1

So if I understand manual well, something like this should work:

capt_t file_cap;
cap_flag_value_t cap_flag_value;

file_cap = cap_get_file("/path/");
if(file_cap != 0) {
    if(cap_get_flag(file_cap, CAP_NEW_RAW, CAP_EFFECTIVE, &cap_flag_value) == 0) {
        if(cap_flag_value == CAP_SET)
        // it works
    }
    else // handle error
    if(cap_get_flag(file_cap, CAP_NEW_RAW, CAP_PERMITTED, &cap_flag_value) == 0) {
        if(cap_flag_value == CAP_SET)
        // it works
    }
    else // handle error
}
else // handle error