rsions,
+		 * we want to hop over the egid.
+		 */
+		suppgroups++;
+		nsupp--;
+#endif
+
+		for (size_t i = 0, s = 0; i < specificgidcnt; i++) {
+			gid_t cgid;
+
+			cgid = specificgids[i];
+			if (cgid == cr1->cr_rgid) {
+				error = 0;
+				break;
+			}
+
+			/*
+			 * specificgids and suppgroups are both sorted
+			 * ascending, so advance past all of the supplemental
+			 * groups that are lower than the specificgid we're
+			 * currently at.
+			 */
+			while (s < nsupp && cgid > suppgroups[s])
+				s++;
+
+			/*
+			 * Out of supplementary groups, but we'll keep checking
+			 * for rgid matches.
+			 */
+			if (s == nsupp)
+				continue;
+
+			if (cgid == suppgroups[s]) {
+				error = 0;
+				break;
+			}
+		}
+	}
+
+	rm_runlock(&seeotheruids_rmlock, &tracker);
+	return (error);
 }
 
 static int
@@ -174,6 +327,7 @@ seeotheruids_socket_check_visible(struct ucred *cred, struct socket *so,
 
 static struct mac_policy_ops seeotheruids_ops =
 {
+	.mpo_destroy = seeotheruids_destroy,
 	.mpo_proc_check_debug = seeotheruids_proc_check_debug,
 	.mpo_proc_check_sched = seeotheruids_proc_check_sched,
 	.mpo_proc_check_signal = seeotheruids_proc_check_signal,