summarylogtreecommitdiffstats
path: root/wesnothd-1.6.service
diff options
context:
space:
mode:
Diffstat (limited to 'wesnothd-1.6.service')
-rw-r--r--wesnothd-1.6.service13
1 files changed, 8 insertions, 5 deletions
diff --git a/wesnothd-1.6.service b/wesnothd-1.6.service
index 0939f1a3fb31..e451c7b66121 100644
--- a/wesnothd-1.6.service
+++ b/wesnothd-1.6.service
@@ -9,19 +9,22 @@ Conflicts=wesnothd.service wesnothd-1.0.servicewesnothd-1.2.service wesnothd-1.4
[Service]
# If wesnothd is started from within the game it runs under a different user.
# Deleting the pipe resets owner, group and mode.
-ExecStopPre=/bin/rm -f /run/wesnothd-1.6/socket
+ExecStartPre=/bin/rm -f /run/wesnothd-1.6/socket
-ExecStart=/usr/bin/wesnothd-1.6 -t 2 -T 5
+ExecStart=/usr/bin/wesnothd-1.6
# You can use -c to specify a same configuration file
# (and make sure wesnothd has the required access permissions).
+# Remove remaining administration pipe:
+ExecStopPost=/bin/rm -f /run/wesnothd-1.6/socket
+
SyslogIdentifier=Wesnothd-1.6
+# Apply security settings only to ExecStart, so the Pre & Post steps run as root
+PermissionsStartOnly=yes
+WorkingDirectory=/run/wesnothd-1.6
User=nobody
Group=users
-# Remove remaining administration pipe:
-ExecStopPost=/bin/rm -f /run/wesnothd-1.6/socket
-
# Additional security-related features:
ProtectSystem=strict
ProtectHome=yes