The snippet I initially found is for a "trigger" which is independent
(other things need to reatsrt ntp. Sorry for the noise.
I found that the new postinst leaves ntp around but reloads the profile (ok
with the process running)
Eventually (after the reload) there is a invoke-rc.d ntp start ||
i
Indeed, steps 3 and 4 should ideally happen in the reverse order. I
don't know if debhelper provides facilities to order autoscript snippets
though.
In passing, once
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1385414 is done
I think we should use systemd's AppArmorProfile= directive a
