Is SUID status for Xwrapper disabled?
The Xwrapper program is a Set-UID root wrapper written so that the X server binaries wouldn't all have to be Set-UID. This program does not need to be Set-UID if you won't be using this machine as a graphical workstation at all. One specific case where you can very safely answer yes is when this system will be running without a monitor of any kind.