>> This is not >> documented in the Release Notes or at https://wiki.debian.org/Xorg. >> Rather, the release notes gives the strong impression that the >> aforementioned items are sufficient to ensure Xorg will not run as root. > So... are you saying that you use gdm3, and your X server is started > as root if -legacy is installed, and started as non-root if -legacy > is not installed? > > Out of curiosity, what graphics chipset is it? > I had this issue last night with a system that used an NVIDIA GTX770 graphics card with the open source nouveau driver. I thought the driver might be the problem so I also tried using the proprietary nvidia-driver (375.66), but the behavior was the same. In both cases, Xorg was started as root so long as xserver-xorg-legacy was installed. I'm pretty sure I also saw the same behavior with a more modern system running an NVIDIA GTX1070 with the proprietary nvidia-driver (375.66).
However, as you note, this does not occur with Intel graphics. I just tested on a machine with an Ivy Bridge Core i5-3470 and integrated Intel HD Graphics 2500. This system loads Xorg as a non-root user with xserver-xorg-legacy installed. I didn't realize this until you mentioned it. So, maybe the bug is that Nvidia hardware is using the setuid wrapper when it's not actually necessary? NOTE: Resending response to the list as I accidentally responded to Greg directly. Sorry :/
signature.asc
Description: OpenPGP digital signature