Re: Database password encryption

Simon Macneall
Thu, 27 Nov 2008 05:26:24 -0000

On Thu, 27 Nov 2008 13:51:45 +0900, Hassan Schroeder
<hassan.schroeder-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:

>> I don''t like either way and I was just hoping that somebody
had
>> already ran into this and had a better solution.
>
> The only way around it is to have someone enter the password into
> the system at startup, which means no automatic restart. If you''ve
got
> 24x7 admin support, that may be acceptable. But even that''s not a
> perfect solution if your system''s been compromised.
>
> Better to keep the bad guys out of your system in the first place,
I''d
> think  :-)
>
also, don''t run with the root account. Set up a special user for the
rails
app to use, and set permission appropriately. That way, if someone manages
to get onto your server and get the db password, they only have access to
a smaller part of the db.

Simon