units: delegate only "cpu" and "pids" controllers by default (#7564)

Now that we can configure which controllers to delegate precisely, let's
limit wht we delegate to the user session: only "cpu" and "pids" as a
minimal baseline.

Fixes: #1715

diff --git a/units/user@.service.in b/units/user@.service.in
index 1cf619a1aef0f518acd2aae3f6b2276e104390c2..e8195acbb6ea66fc7036dd2d211907f925ef1e4a 100644 (file)
--- a/units/user@.service.in
+++ b/units/user@.service.in
@@ -18,6 +18,6 @@ Type=notify
 ExecStart=-@rootlibexecdir@/systemd --user
 Slice=user-%i.slice
 KillMode=mixed
-Delegate=yes
+Delegate=pids cpu
 TasksMax=infinity
 TimeoutStopSec=120s