}


    @Test
    public void resolveWellKnownUsers () throws IOException {
        SID domsid = new SID(getRequiredProperty(TestProperties.TEST_DOMAIN_SID));
        int rids[] = new int[] {
            500, 501
        };
        for ( int rid : rids ) {
            SID sid = new SID(domsid, rid);
            sid.resolve(getRequiredProperty(TestProperties.TEST_DOMAIN_DC), withTestNTLMCredentials(getContext()));

type Examiner struct {
	dies        []*dwarf.Entry
	idxByOffset map[dwarf.Offset]int
	kids        map[int][]int
	parent      map[int]int
	byname      map[string][]int
}

// Populate the Examiner using the DIEs read from rdr.
func (ex *Examiner) Populate(rdr *dwarf.Reader) error {
	ex.idxByOffset = make(map[dwarf.Offset]int)
	ex.kids = make(map[int][]int)
	ex.parent = make(map[int]int)
	ex.byname = make(map[string][]int)

	return getgrouplist(user, group, groups, ngroups);
}
*/
import "C"

func getGroupList(name *_C_char, userGID _C_gid_t, gids *_C_gid_t, n *_C_int) _C_int {
	return C.mygetgrouplist(name, userGID, gids, n)

See the License for the specific language governing permissions and
limitations under the License.
*/

package pidlimit

import (
	"k8s.io/api/core/v1"
)

const (
	// PIDs is the (internal) name for this resource
	PIDs v1.ResourceName = "pid"

	} LsarPolicyInfo;

	typedef struct {
		sid_t *sid;
	} LsarSidPtr;

	typedef struct {
		[range(0,1000)] uint32_t num_sids;
		[size_is(num_sids)] LsarSidPtr *sids;
	} LsarSidArray;

	typedef enum {
		SID_NAME_USE_NONE = 0, /* NOTUSED */
		SID_NAME_USER     = 1, /* user */
		SID_NAME_DOM_GRP  = 2, /* domain group */
		SID_NAME_DOMAIN   = 3, /* domain: don't know what this is */

	} LsarPolicyInfo;

	typedef struct {
		sid_t *sid;
	} LsarSidPtr;

	typedef struct {
		[range(0,1000)] uint32_t num_sids;
		[size_is(num_sids)] LsarSidPtr *sids;
	} LsarSidArray;

	typedef enum {
		SID_NAME_USE_NONE = 0, /* NOTUSED */
		SID_NAME_USER     = 1, /* user */
		SID_NAME_DOM_GRP  = 2, /* domain group */
		SID_NAME_DOMAIN   = 3, /* domain: don't know what this is */

Pengyuan Bian <******@****.***> 1626308505 -0700

iptables -t nat -A ISTIO_OUTPUT -o lo -p tcp ! --dport 53 -m owner ! --uid-owner 3 -j RETURN
iptables -t nat -A ISTIO_OUTPUT -m owner --uid-owner 3 -j RETURN
iptables -t nat -A ISTIO_OUTPUT -o lo ! -d 127.0.0.1/32 -p tcp -m multiport ! --dports 53,15008 -m owner --uid-owner 4 -j ISTIO_IN_REDIRECT

Hervé Boutemy <******@****.***> 1614324322 +0100

	var sids []string
	for _, entry := range entries {
		if entry.Name == nil {
			continue
		}
		sid, err := lookupGroupName(windows.UTF16PtrToString(entry.Name))
		if err != nil {
			return nil, err
		}
		sids = append(sids, sid)
	}
	return sids, nil
}

func newUser(uid, gid, dir, username, domain string) (*User, error) {