--- a/ntpd/ntpd.c.orig	
+++ a/ntpd/ntpd.c.orig	
@@ -971,8 +971,8 @@ getgroup:
 			char *captext;
 			
 			captext = (0 != interface_interval)
-				      ? "cap_sys_time,cap_net_bind_service=pe"
-				      : "cap_sys_time=pe";
+				      ? "cap_ipc_lock,cap_sys_time,cap_net_bind_service=pe"
+				      : "cap_ipc_lock,cap_sys_time=pe";
 			caps = cap_from_text(captext);
 			if (!caps) {
 				msyslog(LOG_ERR,