The directories which are used by the rack application should be readable if the system is hardened with an umask of 0077 (instead of the default 0022).