Lines Matching refs:delegation

82 support for all kinds of per-cgroup BPF magic, supports secure delegation of
147    possible by the concept of delegation, see below). Service units are usually
199 *delegation* is followed. Delegation is a concept we inherited from cgroup v2,
237 instead. If so, delegation is requested for listed controllers
245 Let's stress one thing: delegation is available on scope and service units
248 to them. If we'd allow delegation on slice units then this would mean that
254 for your service code), and turn on delegation for it.
258 where delegation is enabled (and removes it on those cgroups where it is
263 (OK, here's one caveat: if you turn on delegation for a service, and that
266 your service's cgroup. This is necessary because by turning on delegation we
278 turned delegation on for. Why that? You need one level so that systemd can
328    daemon where it is, and would not turn on delegation on its unit. However,
385 specific controller on cgroup v1 you can still make use of it for delegation,
388 separately mounted hierarchies are not available, and delegation has always to
390 adds a new, so far unseen controller, and you want to use it for delegation,
432    forget that there are two levels of delegation involved: first, systemd
495    and there it's safe to treat delegation boundaries as privilege boundaries.