- freeing memory when capabilities are dropped
- fixes building ping, pinpg6 with -pie option - moves most CFLAGS options from spec to Makefile