To be able to bind to a well known port as a non-root user, the CAP_NET_BIND_SERVICE capability is required.