https://www.openbsd.org/faq/faq11.html says
The recommended way to run X is with the xenodm(1) display manager. It offers some important security benefits over the traditional startx(1) command. https://www.openbsd.org/faq/upgrade65.html says The Xorg binary is no longer installed setuid, so startx(1) can no longer be used by non-root users. The xenodm(1) display manager has to be used instead. So should the faq be updated? (Fell free to change the wording to something good) Jan --- faq11.html.orig Fri Aug 23 08:30:22 2019 +++ faq11.html Fri Aug 23 08:32:26 2019 @@ -68,7 +68,10 @@ information in <code>/usr/X11R6/README</code> on the i The recommended way to run X is with the <a href="https://man.openbsd.org/xenodm";>xenodm(1)</a> display manager. It offers some important security benefits over the traditional -<a href="https://man.openbsd.org/startx";>startx(1)</a> command. +<a href="https://man.openbsd.org/startx";>startx(1)</a> command: +the <code>Xorg</code> binary is no longer installed setuid, +so <a href="https://man.openbsd.org/OpenBSD-6.5/startx";>startx(1)</a> +can no longer be used by non-root users. <p> If <a href="https://man.openbsd.org/xenodm";>xenodm(1)</a> wasn't enabled
