Xorg.wrap - Xorg X server binary wrapper
The Xorg X server may need root rights to function properly. To start the Xorg X
server with these rights your system is using a suid root wrapper installed as
/usr/lib/xorg/Xorg.wrap which will execute the real X server which is
installed as /usr/lib/xorg/Xorg.
By default Xorg.wrap will autodetect if root rights are necessary, and if not it
will drop its elevated rights before starting the real X server. By default
Xorg.wrap will only allow executing the real X server from login sessions on a
physical console.
Xorg.wrap's default behavior can be overridden from the
/etc/X11/Xwrapper.config config file. Lines starting with a
# in
Xwrapper.config are considered comments and will be ignored. Any other non
empty lines must take the form of
key =
value.
-
allowed_users =
rootonly|console|anybody
- Specify which users may start the X server through the
wrapper. Use rootonly to only allow root, use console to
only allow users logged into a physical console, and use anybody to
allow anybody. The default is console.
-
needs_root_rights =
yes|no|auto
- Configure if the wrapper should drop its elevated (root)
rights before starting the X server. Use yes to force execution as
root, no to force execution with all suid rights dropped, and
auto to let the wrapper auto-detect. The default is
auto.
When auto-detecting the wrapper will drop rights if kms graphics are available
and not drop them if no kms graphics are detected. If a system has multiple
graphics cards and some are not kms capable auto-detection may fail, in this
case manual configuration should be used.
Xorg X server information:
Xorg(1)