I have ntp-4.1.2-1.rc3.2. I keep seeing this in my syslog: Jun 20 02:46:01 jik ntpd[635]: can't open /etc/ntp/drift.TEMP: Permission denied This makes sense, since ntpd is running as ntp/ntp and the directory is owned by root/root. It looks like when opening the TEMP file fails it falls back on writing directly to /etc/ntp/drift, so all is not lost; still, if it wants to write to a TEMP file, then the RPM should probably be shipped with permissions that allow that.