Rearrange rsyslog and logshipper deps in systemd

Also, create the fifo on demand, with correct security context.
Finally works.

files/default/systemd/logshipper.service

@@ -1,13 +1,18 @@
 [Unit]
 Description=Conjur log shipping service
 Documentation=https://developer.conjur.net
-RequiresOverridable=rsyslog.service
+Wants=rsyslog.service
+Before=rsyslog.service
 
 [Service]
+ExecStartPre=-/bin/rm /var/run/logshipper
+ExecStartPre=/bin/mkfifo --context --mode 0460 /var/run/logshipper
+ExecStartPre=/bin/chown logshipper /var/run/logshipper
 ExecStart=/usr/sbin/logshipper -n /var/run/logshipper
 Restart=always
 User=logshipper
 Group=conjur
+PermissionsStartOnly=true
 
 [Install]
-WantedBy=rsyslog.target
+RequiredBy=rsyslog.service

recipes/_install_logshipper_systemd.rb

@@ -2,12 +2,12 @@
   source 'systemd/logshipper.service'
   owner 'root'
   group 'root'
-  mode '0755'
+  mode '0644'
 end
 
 bash 'enable and run logshipper' do
   code """
     systemctl enable logshipper
-    systemctl start logshipper
+    systemctl restart rsyslog
   """
 end