I have an Apparmor profile in the Debian package, which is derived from the packaging for NTP Classic, which comes fromm Novell/SUSE with changes by Canonical for Ubuntu. I had to make some changes to support SSL. -- Richard