Sending emails via msmtp, plain text password concerns

[anndrew]

Hi all!

I managed to configure Zoneminder to send alert emails to my g maiI account, first enabling two steps authentication and getting an app password. But I had to include that password in plain text in the msmtprc file, located at /etc/. Should I be worried about this?

When I test sending emails from the command line, I can sucessfully use the 'passwordeval' parameter in /etc/msmtprc file, instead of the 'password' parameter (previously setting a public key with gpg), so that the system can decrypt the password each time it needs it. For this it usually asks me for the passphrase. With this configuration, I zoneminder can not send emails, reporting this:

Code: Select all

Unable to send email: error closing /usr/lib/sendmail: Broken pipe (exit -1)

So my question is, can I use the passwordeval parameter to use the encrypted password with zoneminder? And if not, is there any security risk by using passwords in plain text?

INFO of my system:
AMD Rizen 5
Debian bookworm
Zoneminder 1.36

CONFIGURATION of zoneminder: same as stated here bkjaya , which is the same as followed by @robfish zmforum too.