diff --git a/debian/shadowsocks-libev.service b/debian/shadowsocks-libev.service
index 08bf8274..c4489d53 100644
--- a/debian/shadowsocks-libev.service
+++ b/debian/shadowsocks-libev.service
@@ -15,6 +15,7 @@ After=network.target
 
 [Service]
 Type=simple
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE
 EnvironmentFile=/etc/default/shadowsocks-libev
 User=nobody
 Group=nogroup