diff --git a/doc/packaging.md b/doc/packaging.md
index 96038ea..c8a25ad 100644
--- a/doc/packaging.md
+++ b/doc/packaging.md
@@ -20,6 +20,15 @@ config file and the admin Unix socket. These can be customized via the
 
 The default configuration file's template is stored in `config.in`.
 
+## Binding to privileged ports
+
+soju might need to bind to privileged ports: the built-in identd will need to
+listen on port 113. On Linux, unless your service manager provides a way to
+give extra capabilities to soju, the `CAP_NET_BIND_SERVICE` capability can be
+assigned to the soju executable:
+
+    setcap 'cap_net_bind_service=+ep' soju
+
 ## Service manager integration
 
 soju is designed to be run as a system-wide service under a separate user