I'd guess setting the ownership to whatever user and group that your webserver is running under, and then chmod 550 settings.inc.. or maybe just 440. Owner and Group and not World.