Chrony drops privs after startup to user chrony, when restarting it writes its state in /var/lib/chrony, so the directory needs to have the correct permissions for that user. Signed-off-by: Joachim Wiberg <troglobit@gmail.com>