apparently `adduser` resets the ACL

tools/add_users.py

@@ -2,6 +2,7 @@ import subprocess
 import crypt
 import json
 import secrets
+from sys import argv
 
 def get_real_users():
     f = [i.split(":") for i in open("/etc/shadow").read().split("\n")]
@@ -10,8 +11,8 @@ def get_real_users():
 def add_user(u, p):
     p = crypt.crypt(p, crypt.mksalt())
     subprocess.run(["useradd", "-m", "-p", p, u])
-    subprocess.run(["setfacl", "--recursive", "--modify", f"user:{u}:r", f"/home/{u}/.web"])
-    subprocess.run(["setfacl", "--recursive", "--modify", f"default:user:{u}:r", f"/home/{u}/.web"])
+    # adding a new user resets the permission table...
+    subprocess.run(["setfacl", "-m", "u:cathedral:r", "/etc/shadow"])
 
 """
 e.g.
@@ -37,4 +38,4 @@ def generate_list_from_emails(infile):
         add_user(usr, pwd)
     print(key)
 
-generate_list_from_emails("./testmails")
+generate_list_from_emails(argv[1])

tools/test_mail_list.json

@@ -0,0 +1,5 @@
+[
+    "kmakise@lab.org",
+    "aymous@national.shitposters.club",
+    "tsparkle@canterlot.edu"
+]