Looking at it again I think the additional line you meant to add was
/var/log/ntpstats/sysstats* rwl,
So I did that and the problem is gone.
May 4 20:17:53 canopus kernel: [91947.164688] type=1505 audit(1272961073.850:46): operation="profile_replace" pid=25409 name="/usr/sbin/ntpd"
...[quiet through the 20:45:48 time when the error would be expected]
Looking at it again I think the additional line you meant to add was log/ntpstats/ sysstats* rwl,
/var/
So I did that and the problem is gone.
May 4 20:17:53 canopus kernel: [91947.164688] type=1505 audit(127296107 3.850:46) : operation= "profile_ replace" pid=25409 name="/ usr/sbin/ ntpd"
...[quiet through the 20:45:48 time when the error would be expected]
Lock it in!
Cheers.