Implementation: Privilege Separation IMSG_ADJTIME: ntp engine asks the parent to do the adjtime() call requires root same IMSG_SETTIME, calls settime() IMSG_HOST_DNS: ntp engine asks the parent to resolve hostnames requires access to /etc/resolv.conf, YP maps, and whatnot