I have just installed redhat 5.2 and noticed that xterm was running as root. Upon looking in /usr/X11R6/bin in noticed there a number of files set as suid is this correct? The files affected are :- kterm nxterm seyon xbill xhextris xscreensaver and xterm also (but i'm not sure about) XConsole and XWrapper. Ian
XConsole, kterm, nxterm, xterm are suid to log to utmp/wtmp. xscreensaver is setuid to read shadow passwords. (this will be changed in a future release...) xbill & xhextris are set(u|g)id *games* to read/write score files. XWrapper is suid so the X server isn't. :)