It does setrlimit() but that is a separate older mechanism. I don't think it does cgroups. At least the man page doesn't say anything about cgroups.

I didn't realize it did the networking stuff. It does have a lot of options.