/* * A file-system object is determined to be able to execute if it's a * directory or if the execute bit is present in any of the * owner/group/other modes. * * This helper macro is intended to be used in order to implement a * policy that maintains the semantics of "a privileged user can enter * directory, and can execute any file, but only if the file is actually * executable." */