Is it time to drop seccomp?

[Hal Murray]

> Just a word of caution: this AppArmor policy is geared towards an NTP client
> and you will need to do some (poorly documented) configuration changes when
> configuring a server so the adaemon can get at the device files for the
> refclock.  

I wouldn't use client vs server to distinguish between systems using 
refclocks.  I would have said:

Just a word of caution: this AppArmor policy is geared towards a
simple NTP client.  You will need to do some (poorly documented)
configuration changes when setting up a system using refclocks.


-- 
These are my opinions.  I hate spam.