Xorg.wrap(1)

💖 Xorg.wrap(1) — the Xorg X server binary wrapper, bestie edition 💖

okay so this is the manual page for Xorg.wrap, a lil general commands manual situation. Let's get into it. ✨

---

🎀 NAME 🎀

Xorg.wrap — the Xorg X server binary wrapper. she's the middleman. the vibe translator. the girl who holds the door. 💅

---

🌸 DESCRIPTION 🌸

So here's the tea, bestie: the Xorg X server lowkey might need root rights to actually function properly. 😭 And to start the Xorg X server with those rights, your system uses a suid root wrapper — that's her, that's Xorg.wrap — installed at:

/usr/libexec/Xorg.wrap

and she will execute the real X server, which lives at:

/usr/libexec/Xorg

<div></div>

By default, Xorg.wrap will autodetect whether root rights are actually necessary, and if they're not, she will drop her elevated rights before starting the real X server. Very demure. Very mindful. 🧚

By default, Xorg.wrap will only allow executing the real X server from login sessions on a physical console. That's the boundary. Respect it. 👑

---

✨ CONFIG FILE ✨

Xorg.wrap's default behavior can be overridden from the config file at:

/etc/X11/Xwrapper.config

Some ground rules for this file, periodt:

• Lines starting with a # in Xwrapper.config are considered comments and will be ignored. 💤
• Any other non-empty lines must take the form of key = value.

<div></div>

🦋 The keys, explained (with love) 🦋

• allowed_users = rootonly|console|anybody — specify which users may start the X server through the wrapper. Use rootonly to only allow root, use console to only allow users logged into a physical console, and use anybody to allow anybody. The default is console.
• needs_root_rights = yes|no|auto — configure if the wrapper should drop its elevated (root) rights before starting the X server. Use yes to force execution as root, no to force execution with all suid rights dropped, and auto to let the wrapper auto-detect. The default is auto.

<div></div>

⚠️ Okay so here's the ✨fine print✨ that actually matters: when auto-detecting, the wrapper will drop rights if kms graphics are available and not drop them if no kms graphics are detected. If a system has multiple graphics cards and some are not kms capable, auto-detection may fail — in this case, manual configuration should be used. no cap, just set it yourself. 🙈

---

👀 SEE ALSO 👀

Xorg X server information: Xorg(1) — go read that one too, bestie, she's iconic. 💜

---

and that's the whole page, you ate that. 🫶 X Version 11, xorg-server 21.1.25, mwah 💋 bye bestie 🎀✨