Don't make settings.php world-writable as the official Drupal docs say.

Gentoo's webapp-config already handle's this smartly.

drupal/firstboot.start

@@ -6,6 +6,4 @@ echo Configuring Postgres for Drupal
 createuser --no-adduser --no-createdb --no-createrole -U postgres drupal
 createdb --encoding=UNICODE --owner=drupal -U postgres drupal
 
-chmod a+w /usr/share/webapps/drupal/${DPVER}/htdocs/sites/default/settings.php
-
 mv /etc/local.d/firstboot.start /etc/local.d/firstboot.start.disabled

drupal/motd.sh

@@ -17,7 +17,5 @@ cat << EOF
  Before using this appliance, you must first configure Drupal, point your
  browser at http://${HOSTNAME}/ to configure.  The database name is "drupal"
  and the username is "drupal".  The DBMS is on localhost and requires no
- password.  After configuration, be sure to change the permissions of
- /usr/share/webapps/drupal/${DPVER}/htdocs/sites/default/settings.php so
- that it is not world-writable.
+ password. 
 EOF