How to restore file capabilities?

view story

http://forums.fedoraforum.org – I used tar to copy my Fedora 17 install to another drive and didn't realize I needed to add extra options to do a proper copy. I discovered this after ping would no longer work as a normal user because it had lost its "cap_net_raw+ep" capability. I googled and read that if you touch the file /.autorelabel and reboot, your system will be fixed, but this is not true. It took a while while it fixed all the SElinux labels (visible with ls -lZ) but NOT the capabilities. I tried using the restorecon command directly and that also does not work. I deliberately munged some SElinux labels (HowTos)