Joel, I think you should create the /log and /database-backup directories (perhaps with a file named ".keepme" to keep cvs happy). Even if you have to tweak permissions you could just chown -R your /web/service directory, and if we can assume /log and /database-backup already exist we can program the run scripts properly so that OpenACS runs "out of the box".
