--- a/initsystems/systemd/ipsec.service.in.orig	2020-02-14 08:11:29.883638349 +0100
+++ b/initsystems/systemd/ipsec.service.in	2020-02-14 08:11:40.555430565 +0100
@@ -29,8 +29,8 @@
 # Enable for portexcludes support
 # ExecStartPost=@FINALLIBEXECDIR@/portexcludes
 ExecStop=@FINALLIBEXECDIR@/whack --shutdown
-ExecStopPost=/sbin/ip xfrm policy flush
-ExecStopPost=/sbin/ip xfrm state flush
+ExecStopPost=/bin/ip xfrm policy flush
+ExecStopPost=/bin/ip xfrm state flush
 ExecStopPost=@FINALSBINDIR@/ipsec --stopnflog
 ExecReload=@FINALLIBEXECDIR@/whack --listen