I have just installed redhat 5.2 and noticed that xterm was
running as root. Upon looking in /usr/X11R6/bin in noticed
there a number of files set as suid is this correct?
The files affected are :-
also (but i'm not sure about) XConsole and XWrapper.
XConsole, kterm, nxterm, xterm are suid to log to utmp/wtmp.
xscreensaver is setuid to read shadow passwords.
(this will be changed in a future release...)
xbill & xhextris are set(u|g)id *games* to read/write score files.
XWrapper is suid so the X server isn't. :)