Resources not created by clients are default resources labeled ADMIN_LOW. Only clients running at ADMIN_LOW or with the appropriate privileges can modify default resources.
Root window attributes - All clients have read and create access, but only privileged clients have write or modify access. See "Privileged Operations".
Default cursor - Clients are free to reference the default cursor in protocol requests.
Predefined atoms - The /usr/openwin/server/tsol/public.atoms file contains a read-only list of predefined atoms.