Would it be safe to say only the files directory should be owned by apache user ?
I have mine set files
And all other drupal directories
My permissions are set to 755 for everything excepting 444 on settings.php
Actually my files I've set to 775 and have
chown -R root:apache html
chown -R apache:root files