Cgmanager provides a central cgroup manager daemon and a per-namespace manager proxy, allowing users and programs to administrate cgroups through d-bus requests.

this provides a pluggable authentication module (pam) to provide logged-in users with a set of cgroups which they can administer. this allows for instance unprivileged containers.