diff --git a/files/acl.py b/files/acl.py
index 30c533e006c..9790f8c927f 100644
--- a/files/acl.py
+++ b/files/acl.py
@@ -111,6 +111,9 @@ def normalize_permissions(p):
             perms[1] = 'w'
         if char == 'x':
             perms[2] = 'x'
+        if char == 'X':
+            if perms[2] != 'x':  # 'x' is more permissive
+              perms[2] = 'X'
     return ''.join(perms)
 
 def split_entry(entry):