[Unit]
Description=procprotect module
After=syslog.target network.target

[Service]
Type=forking
ExecStart=/usr/sbin/procprotect.init
# it appears this attribute is read-only
#ControlGroup=cpu:/

[Install]
WantedBy=multi-user.target