service: fix pipe management

1 files changed, 8 insertions, 5 deletions

diff --git a/wesnothd-1.10.service b/wesnothd-1.10.service
index 7a8a26fda111..81297d003e0f 100644
--- a/wesnothd-1.10.service
+++ b/wesnothd-1.10.service
@@ -9,19 +9,22 @@ Conflicts=wesnothd.service wesnothd-1.0.service wesnothd-1.2.service wesnothd-1.
 [Service]
 # If wesnothd is started from within the game it runs under a different user.
 # Deleting the pipe resets owner, group and mode.
-ExecStopPre=/bin/rm -f /run/wesnothd-1.10/socket
+ExecStartPre=/bin/rm -f /run/wesnothd-1.10/socket
 
-ExecStart=/usr/bin/wesnothd-1.10 -t 2 -T 5
+ExecStart=/usr/bin/wesnothd-1.10
 # You can use -c to specify a same configuration file
 # (and make sure wesnothd has the required access permissions).
 
+# Remove remaining administration pipe:
+ExecStopPost=/bin/rm -f /run/wesnothd-1.10/socket
+
 SyslogIdentifier=Wesnothd-1.10
+# Apply security settings only to ExecStart, so the Pre & Post steps run as root
+PermissionsStartOnly=yes
+WorkingDirectory=/run/wesnothd-1.10
 User=nobody
 Group=users
 
-# Remove remaining administration pipe:
-ExecStopPost=/bin/rm -f /run/wesnothd-1.10/socket
-
 # Additional security-related features:
 PrivateTmp=yes
 PrivateDevices=yes