diff --git a/srcpkgs/ntp/files/ntp.conf b/srcpkgs/ntp/files/ntp.conf
index e75cd1a107d..278dadd0a06 100644
--- a/srcpkgs/ntp/files/ntp.conf
+++ b/srcpkgs/ntp/files/ntp.conf
@@ -10,7 +10,7 @@ server 1.pool.ntp.org
 server 2.pool.ntp.org
 
 # Only allow read-only access from localhost
-restrict default nomodify nopeer
+restrict default kod noquery nomodify nopeer
 restrict 127.0.0.1
 
 # Location of drift and log files
diff --git a/srcpkgs/ntp/files/ntpd/run b/srcpkgs/ntp/files/ntpd/run
index 3fdff4b4af1..36e762430c9 100755
--- a/srcpkgs/ntp/files/ntpd/run
+++ b/srcpkgs/ntp/files/ntpd/run
@@ -1,4 +1,6 @@
 #!/bin/sh
 mkdir -p /var/chroot/ntpd/etc
+mkdir -p /var/chroot/ntpd/var/db/ntpd
 cp /etc/services /var/chroot/ntpd/etc/
+ln -fs /var/db/ntpd/drift /var/chroot/ntpd/var/db/ntpd/drift
 exec ntpd -g -u ntpd:ntpd -n -i /var/chroot/ntpd
diff --git a/srcpkgs/ntp/template b/srcpkgs/ntp/template
index 3e7e41144c3..47efddb2d89 100644
--- a/srcpkgs/ntp/template
+++ b/srcpkgs/ntp/template
@@ -1,7 +1,7 @@
 # Template file for 'ntp'
 pkgname=ntp
 version=4.2.8
-revision=3
+revision=4
 build_style=gnu-configure
 configure_args="--with-crypto --enable-linuxcap --enable-ipv6 --enable-ntp-signd
  ol_cv_pthread_select_yields=yes"