I want to give several files Linux capabilities (e.g. CAP_NET_ADMIN). I am using Yocto and my file system should be read-only and must not be changed after flashing the software
Finally I solved the problem by updating mtd-utils to mtd-utils-2.0.0 (mkfs.ubifs supports extended attributes).
Furthermore, I am now using IMAGE_PREPROCESS_COMMAND to set the capabilities directly before the image is processed.