# Capistrano

**URL:** <https://www.ruby-forum.com/t/capistrano/135796>\
**Category:** Rails\
**Created:** [April 25, 2008, 1:27am UTC](https://www.ruby-forum.com/t/capistrano/135796 "2008-04-25T01:27:20Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![mdaoust](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/dbc845/32.png) [@mdaoust](https://www.ruby-forum.com/u/mdaoust)\
**Post date:** [April 25, 2008, 1:27am UTC](https://www.ruby-forum.com/t/capistrano/135796/1 "2008-04-25T01:27:20Z")

</div>

Probably not the correct place to ask this, but I’m sure it’s something  
which would affect a lot of Rails deployments…

Should you make the ‘database.yml’ file readable only to the app process  
(e.g. mongrel) - as it contains the database password. Does this offer  
any security?

~ Mark