Xorg.wrap(1) General Commands Manual Xorg.wrap(1)
NAME
Xorg.wrap - Xorg X server binary wrapper
DESCRIPTION
The Xorg X server may need root rights to function properly. To start
the Xorg X server with these rights your system is using a suid root
wrapper installed as /usr/lib/xorg/Xorg.wrap which will execute the real
X server which is installed as /usr/lib/xorg/Xorg.
By default Xorg.wrap will autodetect if root rights are necessary, and
if not it will drop its elevated rights before starting the real X
server. By default Xorg.wrap will only allow executing the real X
server from login sessions on a physical console.
CONFIG FILE
Xorg.wrap's default behavior can be overridden from the /etc/X11/Xwrap-
per.config config file. Lines starting with a # in Xwrapper.config are
considered comments and will be ignored. Any other non empty lines must
take the form of key = value.
allowed_users = rootonly|console|anybody
Specify which users may start the X server through the wrapper.
Use rootonly to only allow root, use console to only allow users
logged into a physical console, and use anybody to allow any-
body. The default is console.
needs_root_rights = yes|no|auto
Configure if the wrapper should drop its elevated (root) rights
before starting the X server. Use yes to force execution as
root, no to force execution with all suid rights dropped, and
auto to let the wrapper auto-detect. The default is auto.
When auto-detecting the wrapper will drop rights if kms graphics are
available and not drop them if no kms graphics are detected. If a system
has multiple graphics cards and some are not kms capable auto-detection
may fail, in this case manual configuration should be used.
SEE ALSO
Xorg X server information: Xorg(1)
X Version 11 xorg-server 21.1.16 Xorg.wrap(1)
Generated by dwww version 1.16 on Sat Oct 3 04:55:07 CEST 2026.