Add acl exclude list, show excluded users in check

bin/xymon-home.py

@@ -13,7 +13,7 @@ import dphysldap
 import pyxymon as pymon
 
 CHECK_NAME = 'permissions'
-CHECK_VERSION = 4
+CHECK_VERSION = 5
 LIFETIME = 30
 
 home_dir = '/export/home1/*'
@@ -32,6 +32,9 @@ no_blocked = []
 not_closed = []
 not_open = []
 permission_exclude = ['sengun','jheinsoo']
+acl_exclude = ['jheinsoo']
+permission_excluded = []
+acl_excluded = []
 
 
 class Home(object):
@@ -127,9 +130,14 @@ def check_homes(top):
         if bad_permission(home):
             if f not in permission_exclude:
                 permission.append(home)
+            else:
+                permission_excluded.append(home)
 
         if posix1e.has_extended(home.path):
-            acl.append(home)
+            if f not in acl_exclude:
+                acl.append(home)
+            else:
+                acl_excluded.append(home)
 
         if home.name in users:
             if users[home.name]['homeDirectory'][6:] != home.name:
@@ -237,6 +245,13 @@ def run_check(xymon):
         xymon.section(title, content)
         xymon.color = pymon.STATUS_CRITICAL
 
+    if permission_excluded:
+        title = 'bad permissions ignored'
+        content = 'home permission not <code>drwx------</code> (active user) or <code>d---------</code> (blocked user)<br/><br/>'
+        for home in permission_excluded:
+            content += ''.join([str(home.permission), '<br/>'])
+        xymon.section(title, content)
+
     if not_closed:
         title = 'home not closed (bad permissions)'
         content = 'blocked user homes should have <code>u=---</code><br/><br/>'
@@ -263,6 +278,15 @@ def run_check(xymon):
         xymon.section(title, content)
         xymon.color = pymon.STATUS_CRITICAL
 
+    if acl_excluded:
+        title = 'bad acls ignored'
+        content = 'home has posix.1e extended ACLs<br/>check acls using `getfacl`, which stands for `get fucking ACL`<br/><br/>'
+        for home in acl_excluded:
+            extacl = posix1e.ACL(file=home.path)
+            content += ''.join([home.path, '<br/>'])
+            content += ''.join([str(extacl), '<br/>'])
+        xymon.section(title, content)
+
     if users:
         title = 'strange ldap users'
         content = 'these users seem to not have a home directory on the filesystem<br/><br/>'