service: fix pipe management

1 files changed, 8 insertions, 5 deletions

diff --git a/wesnothd-1.2.service b/wesnothd-1.2.service
index c948a2b0b067..9a6ae60f9f40 100644
--- a/wesnothd-1.2.service
+++ b/wesnothd-1.2.service
@@ -9,19 +9,22 @@ Conflicts=wesnothd.service wesnothd-1.0.service wesnothd-1.4.service wesnothd-1.
 [Service]
 # If wesnothd is started from within the game it runs under a different user
 # Deleting the pipe resets owner, group and mode
-ExecStopPre=/bin/rm -f /run/wesnothd-1.2/socket
+ExecStartPre=/bin/rm -f /run/wesnothd-1.2/socket
 
-ExecStart=/usr/bin/wesnothd-1.2 -t 2 -T 5
+ExecStart=/usr/bin/wesnothd-1.2
 # you can use -c to specify a configuration file
 # (and make sure wesnothd has the required access permissions)
 
+# Remove remaining administration pipe
+ExecStopPost=/bin/rm -f /run/wesnothd-1.2/socket
+
 SyslogIdentifier=Wesnothd-1.2
+# Apply security settings only to ExecStart, so the Pre & Post steps run as root
+PermissionsStartOnly=yes
+WorkingDirectory=/run/wesnothd-1.2
 User=nobody
 Group=users
 
-# Remove remaining administration pipe
-ExecStopPost=/bin/rm -f /run/wesnothd-1.2/socket
-
 # Additional security-related features
 ProtectSystem=strict
 ProtectHome=yes