diff --git a/monit/README.md b/monit/README.md
index 5d87624..f9de13c 100644
--- a/monit/README.md
+++ b/monit/README.md
@@ -16,6 +16,9 @@ monit:
   restart: always
 ```
 
+> The control file `/etc/monit/monitrc` must have permissions no more than
+> `-rwx------ (0700)`
+
 ## server
 
 ```