net-misc/ntp: replace with ntpsec

net-misc/ntp is masked in the Gentoo tree; ntpsec is the direct
security-hardened replacement with the same tools and config format.
Remove the ntp-specific CFLAGS workaround from profile.bashrc.

Author: blshkv

pentoo/pentoo-misc/pentoo-misc-2026.2.ebuild

@@ -61,7 +61,7 @@ PDEPEND="
 		net-misc/iperf
 		net-misc/iputils
 		net-misc/netsed
-		net-misc/ntp
+		net-misc/ntpsec
 		cups? ( net-print/foomatic-db )
 		net-misc/portspoof
 		net-vpn/openvpn

pentoo/rfctf-client/rfctf-client-2026.2.ebuild

@@ -48,7 +48,7 @@ PDEPEND="
 			net-analyzer/tcpdump
 			net-dns/bind-tools
 			net-misc/autossh
-			net-misc/ntp
+			net-misc/ntpsec
 			net-wireless/aircrack-ng
 			net-ftp/tftp-hpa
 		)

profiles/pentoo/zero-system/profile.bashrc

@@ -32,9 +32,6 @@ fi
 if [[ ${CATEGORY}/${PN} == dev-python/nassl ]]; then
   export CFLAGS="${CFLAGS/-Werror=stringop-overread/}"
 fi
-if [[ ${CATEGORY}/${PN} == net-misc/ntp ]]; then
-  export CFLAGS="${CFLAGS/-Werror=stringop-overread/}"
-fi
 if [[ ${CATEGORY}/${PN} == media-video/ffmpeg ]]; then
   export CFLAGS="${CFLAGS/-Werror=stringop-overread/}"
 fi