login run from root-owned xterm
 

good day, i set up my box to start an X server on system boot and then have init spawn an xterm on it, which in turn runs /bin/login on startup... problem is, the xterm the login process is called from is owned by root, and i was wondering if this could poise a security treat... im playing around with this solution on my home machine for now, and find it way more convenient than relying on the framebuffer to have a nice, high res console to work with, I am wondering if this could be suitable for a production environment though... thanks in advance for your feedback, regards

As long as you run xterm with the -e /bin/login and not some script it should be ok, as when login exits the xterm should too.

Regards

Also a window manager should not be running