[Service]
Environment=EXECSNOOP_PATH=/usr/share/bcc/tools/execsnoop