Yes, those pins are set in stone, if you want to use the hardware SPI peripheral.
You can always "bit bang" an SPI protocol using digitalWrite() functions (or lower-level writes to PORTx registers) to any pins that you want, but this will be much slower, of course.
--
The Rugged Circuits Yellowjacket: 802.11 WiFi module with ATmega328P microcontroller, only 1.6" x 1.2", bootloader