From 5dfcaaaf11b9fe8551d3a8734c9853dba6b229ac Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Thu, 7 Dec 2017 08:48:08 +0100
Subject: [PATCH] units: delegate only "cpu" and "pids" controllers by default
 (#7564)

Now that we can configure which controllers to delegate precisely, let's
limit wht we delegate to the user session: only "cpu" and "pids" as a
minimal baseline.

Fixes: #1715
---
 units/user@.service.in | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/units/user@.service.in b/units/user@.service.in
index 1cf619a1ae..e8195acbb6 100644
--- a/units/user@.service.in
+++ b/units/user@.service.in
@@ -18,6 +18,6 @@ Type=notify
 ExecStart=-@rootlibexecdir@/systemd --user
 Slice=user-%i.slice
 KillMode=mixed
-Delegate=yes
+Delegate=pids cpu
 TasksMax=infinity
 TimeoutStopSec=120s