Bigest change is xserver needs to create /dev/dri directory. This should be fixed so Xorg uses udev in the future but for now I have granted the privs. ipsec seems to be a mess. Dan