realgroupmember
if (realgroupmember(u1->cr_rgid, u2))
if (realgroupmember(u1->cr_groups[i], u2))
if (rule->from_type == IT_GID && realgroupmember(rule->from_id, cred))
bool realgroupmember(gid_t gid, const struct ucred *cred);