On Ubuntu you can alternatively use authbind, which lets an administrator grant permissions to bind to specific ports by user/group. This means the permission is not bound to any particular application binary, and therefore persists when the binary is updated.
