Hello, Andrius Štikona and Markus Ongyerth are totally right, AFAIK. If it's an X11 app that simply cannot be run without root, then you need the xhost command to allow only local connections from the root user. If it's a native Wayland app that cannot run without root, then you probably bind-mount the wayland socket from the user's $XDG_RUNTIME_DIR to the root's. (I've never done it myself) Whether such access should be granted by default to the root user is a policy decision, up for the DE or distribution or admin. Personally I'd like to see the access not granted, so there would be more pressure to fix the apps to not run GUI as root. Therefore I am resolving this issue as 'wontfix'. Regards
Attachment:
signature.asc
Description: PGP signature