Dear Maintainer,

I noticed my openntpd wasn't running anymore do to a clock skew error on
building i3 from source. It seems from version 7.9p1-3 and up the location of
the sock file changed from `/var/lib/openntpd/run/ntpd.sock` to
`/run/openntpd/ntpd.sock`. This causes apparmor issues:

Aug 05 02:44:05 sputnik-odin kernel: audit: type=1400
audit(1785912245.478:30553): apparmor="DENIED" operation="mknod" class="file"
profile="/usr/sbin/ntpd" name="/run/openntpd/ntpd.sock" pid=255478 comm="ntpd"
requested_mask="c" denied_mask="c" fsuid=0 ouid=0

Aug 05 02:46:17 sputnik-odin kernel: audit: type=1400
audit(1785912377.102:30562): apparmor="DENIED" operation="mknod" class="file"
profile="/usr/sbin/ntpd" name="/var/lib/openntpd/ntpd.drift" pid=256003
comm="ntpd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0

A downgrade to a stable package made it work and while bisecting I noticed the
first error on 1:7.9p1-3, it is also present on 7.9p1-4. Although I didn't test
the openntpd_1%3a6.8p1-6_amd64.deb, openntpd_1%3a6.8p1-5_amd64.deb packages.

To fix the glich I had to add `/run/openntpd/ntpd.sock rw,` to
`/etc/apparmor.d/usr.sbin.ntpd` and reload it with `apparmor_parser -r
/etc/apparmor.d/usr.sbin.ntpd` after which the problem got solved.

Could you please update the apparmor profile for openntpd so issues are
resolved going forward? Many thanks!

Cheers,
Wesley

Sorry, where would you add this? We currently have:

  /usr/sbin/ntpd mrix,
  /var/lib/openntpd/ntpd.drift rw,
  /run/openntpd/ntpd.sock rw,

Martin-Éric