- nginx starts with root permissions
- that's because any process that requires to run below port
1024
needs elevated privileges - The TCP/IP port numbers below
1024
are special in that normal users are not allowed to run servers on them. This is a security feaure, in that if you connect to a service on one of these ports you can be fairly sure that you have the real thing, and not a fake which some hacker has put up for you.
- but then the trouble arrives when nginx wants to limit the privileges (because, an unrestricted process can do a lot of damage, and this is why
deno
doesn't even have file systems permissions when it starts) - this is why nginx spawns several child processes