On this plain install of Xenial apparmor complains about ntpd:
[ 19.379152] audit: type=1400 audit(1467623330.386:27): apparmor="DENIED" operation="connect" profile="/usr/sbin/ntpd" name="/run/dbus/system_bus_socket" pid=4513 comm="ntpd" requested_mask="wr" denied_mask="wr" fsuid=121 ouid=0 [ 20.379299] audit: type=1400 audit(1467623331.386:28): apparmor="DENIED" operation="connect" profile="/usr/sbin/ntpd" name="/run/dbus/system_bus_socket" pid=4513 comm="ntpd" requested_mask="wr" denied_mask="wr" fsuid=121 ouid=0 [ 22.426246] audit: type=1400 audit(1467623333.434:29): apparmor="DENIED" operation="connect" profile="/usr/sbin/ntpd" name="/run/dbus/system_bus_socket" pid=4513 comm="ntpd" requested_mask="wr" denied_mask="wr" fsuid=121 ouid=0 [ 22.771326] audit: type=1400 audit(1467623333.782:30): apparmor="DENIED" operation="connect" profile="/usr/sbin/ntpd" name="/run/dbus/system_bus_socket" pid=4513 comm="ntpd" requested_mask="wr" denied_mask="wr" fsuid=121 ouid=0 [ 23.568548] audit: type=1400 audit(1467623334.574:31): apparmor="DENIED" operation="connect" profile="/usr/sbin/ntpd" name="/run/dbus/system_bus_socket" pid=4513 comm="ntpd" requested_mask="wr" denied_mask="wr" fsuid=121 ouid=0
Adding the following line to /etc/apparmor.d/usr.sbin.ntpd fixes the problem:
#include <abstractions/dbus-strict>
On this plain install of Xenial apparmor complains about ntpd:
[ 19.379152] audit: type=1400 audit(146762333 0.386:27) : apparmor="DENIED" operation="connect" profile= "/usr/sbin/ ntpd" name="/ run/dbus/ system_ bus_socket" pid=4513 comm="ntpd" requested_mask="wr" denied_mask="wr" fsuid=121 ouid=0 1.386:28) : apparmor="DENIED" operation="connect" profile= "/usr/sbin/ ntpd" name="/ run/dbus/ system_ bus_socket" pid=4513 comm="ntpd" requested_mask="wr" denied_mask="wr" fsuid=121 ouid=0 3.434:29) : apparmor="DENIED" operation="connect" profile= "/usr/sbin/ ntpd" name="/ run/dbus/ system_ bus_socket" pid=4513 comm="ntpd" requested_mask="wr" denied_mask="wr" fsuid=121 ouid=0 3.782:30) : apparmor="DENIED" operation="connect" profile= "/usr/sbin/ ntpd" name="/ run/dbus/ system_ bus_socket" pid=4513 comm="ntpd" requested_mask="wr" denied_mask="wr" fsuid=121 ouid=0 4.574:31) : apparmor="DENIED" operation="connect" profile= "/usr/sbin/ ntpd" name="/ run/dbus/ system_ bus_socket" pid=4513 comm="ntpd" requested_mask="wr" denied_mask="wr" fsuid=121 ouid=0
[ 20.379299] audit: type=1400 audit(146762333
[ 22.426246] audit: type=1400 audit(146762333
[ 22.771326] audit: type=1400 audit(146762333
[ 23.568548] audit: type=1400 audit(146762333
Adding the following line to /etc/apparmor. d/usr.sbin. ntpd fixes the problem:
#include <abstractions/ dbus-strict>