Solaris includes Xorg built with patches that drop root privileges after startup, relying on the kernel to handle input device access for hotplugging & vt switching, and utilizing patches to gdm to pass information to Xorg on authenticated users. This talk will go over some of the details and open a discussion on what should be upstreamed.
video, slides (pdf), slides (odp)