weird ACL problem (grsec 1.9.11)