// we set default access right to be 0660.
// TODO need a way to allow this to be changed
- fsapi_inode_setaccess(inode, FSACL_u(R, W, _) | FSACL_g(R, W, _));
+ fsapi_inode_setaccess(inode, FSACL_u(R, W, X) | FSACL_g(R, W, X) | FSACL_oX);
fsapi_inode_setowner(inode, 0, 0);
}