Hiding SQL password?

[Jason Levine <sp...@queso.com>]

Is there any way to hide the SQL database password from users?  Currently,
it's plaintext in the local.cf file, a file that has to be world-readable
in order for users to be able to use the spamassassin client in an setuid
environment.  (Thus, setting the file to disallow world reading results in
users not being able to read in the site-wide configuration, which sorta
defeats the purpose!)

Is there some other mechanism for telling spamassassin about the password
without also revealing it to every user that has access to the system?

Thanks...

/jason

Re: Hiding SQL password?

["Eric W. Bates" <er...@vineyard.net>]

You could give everyone their own login to mysql? (onerous)

Jason Levine wrote:
> Is there any way to hide the SQL database password from users?  Currently,
> it's plaintext in the local.cf file, a file that has to be world-readable
> in order for users to be able to use the spamassassin client in an setuid
> environment.  (Thus, setting the file to disallow world reading results in
> users not being able to read in the site-wide configuration, which sorta
> defeats the purpose!)
> 
> Is there some other mechanism for telling spamassassin about the password
> without also revealing it to every user that has access to the system?
> 
> Thanks...
> 
> /jason