Both files are 775 (-rwxr-xr-x)
It seems that they should be at most 644
I originally reported this against ArchLinux, and was told that:
"The same permissions are specified in xorg-xinit's PKGBUILD (the package that both files belong to)."
The relevant(???) versions in Arch:
PKGBUILD sounds like an ArchLinux packaging file. X.Org does not
distribute any files that install under /etc/skel, nor a "PKGBUILD".