Linux Virtual Delivery Agent

Rootless Xorg

The Linux VDA supports running Xorg with non-root user privileges, also known as “rootless” Xorg. Rootless Xorg is a significant security improvement over running as root.

Note:

  • Xorg does not support rootless operation on Amazon Linux 2, RHEL 7, or Rocky Linux 7.
  • Rootless Xorg also requires support from the GPU driver. If you are using a Remote PC Access VDA, test and verify that your GPU driver supports Rootless Xorg.

Rootless Xorg is enabled by default for VDAs without a GPU and VDAs using a NVIDIA GPU. You can manually enable and disable the feature using the following commands, respectively:

sudo /opt/Citrix/VDA/bin/ctxreg create -k "HKLM\System\CurrentControlSet\Control\Citrix\Xorg" -t "REG_DWORD" -v "Rootless" -d "1" --force
<!--NeedCopy-->
sudo /opt/Citrix/VDA/bin/ctxreg create -k "HKLM\System\CurrentControlSet\Control\Citrix\Xorg" -t "REG_DWORD" -v "Rootless" -d "0" --force
<!--NeedCopy-->
Rootless Xorg

In this article