> I guess we could make /dev/kbd and /dev/mouse (0600 root) and
> make the X server SUID root.  The only problem is, I'm not sure
> the X server is designed for SUID root use, so one could end up
> opening an even larger security hole...

I think it is designed to be run SUID root.  X11R6 on i386 with
XFree86 *must* be SUID root, on Sun3 X11R6 does not seem to launch
anything without "revoking the throne" first.

Only thing is that the change back from euid to ruid seems to happen
too soon.  It still needs a 666 /dev/bwtwo0.

~Ken