On Wed, Dec 28, 2016 at 07:04:20PM +0000, Taylor R Campbell wrote: > Likewise DRM/KMS. We should disable options INSECURE by default on > x86 and make Xorg not be suid root. Obscure systems that still need > it -- e.g., VIA, perhaps, which has no KMS driver -- can use custom > kernel configs.
Unfortunately it is not that simple. We recently noticed that Xorg on sparc64 for PCI cards now needs INSECURE, despite proper framebuffer drivers. Martin