ntfs_allowed_access
allow = ntfs_allowed_access(scx,
int ntfs_allowed_access(struct SECURITY_CONTEXT *scx,
&& !ntfs_allowed_access(&security,dir_ni,S_IWRITE + S_IEXEC))