in postinst of the pluto-dhcpd-plugin add the line "network packet raw," to app.armor.
[http://forum.linuxmce.org/index.php/topic,13282.0.html]